Engineer, Customer Identity and Access

Overview

ASX are seeking a highly skilled IAM ForgeRock Developer to take ownership of our customer identity practice within a leading financial services environment. This is a hands-on leadership role responsible for designing, building, and maintaining enterprise-grade identity and access (IAM) solutions across a complex ecosystem.

What You'll Do

• Lead the design, development, and implementation of ForgeRock based IAM solutions, including authentication, authorisation, directory, and identity API services.
• Provide ongoing support, troubleshooting, and maintenance of identity platforms, including participation in 24/7 on-call support rotation (shared across a team).
• Deliver federated identity solutions using protocols such as OAuth 2.0, OpenID Connect, and SAML 2.0.
• Implement CI/CD pipelines for IAM solutions, ensuring automation, testing, and secure deployment.
• Provide technical leadership to the IAM engineering team, ensuring best practices in coding, design patterns, and DevSecOps are applied.
• Collaborate with Enterprise Architects, Product Owners, and security stakeholders to align IAM strategy with business and regulatory requirements.
• Develop customisations, integrations, and extensions using Groovy, JavaScript, and Java.
• Ensure IAM solutions support regulatory compliance, risk management, and operational resilience.

What You've Done

• Extensive hands-on experience with the ForgeRock Identity Platform (Access Manager, Identity Manager, Directory Services, Identity Gateway).
• Strong understanding of IAM standards and protocols: OAuth 2.0, OpenID Connect, SAML 2.0, SCIM.
• Experience designing and implementing federated identity solutions across large-scale enterprise or financial services platforms.
• Proficiency in scripting and programming: Groovy, JavaScript, Java (additional languages advantageous).
• Experience with CI/CD pipelines, automation frameworks, and containerisation (Jenkins, GitLab CI, Docker, Kubernetes).
• Strong knowledge of identity lifecycle management, access governance, privileged access, and role-based access control.
• Demonstrated ability to lead and mentor technical teams, while remaining hands-on with development and troubleshooting.
• Experience in financial services or other highly regulated industries is desirable.

And if you've got some of this, even better:

• Knowledge or experience with the SailPoint Identity Platform
• Ability to troubleshoot non-standard / undocumented issues and provide solutions within the existing framework
• Be confident to provide input to continual improvements
• Accountable for execution according to established standards, procedures, and processes
• Accountable for day-to-day Identity & Access system queue and provide 2nd / 3rd level support
• Adherence to current IAM policies and procedures
• Active Directory administration and troubleshooting skills
• Understanding of LDAP and directory query services and tools (PowerShell scripting)
• Cloud platforms and applications technologies (Google, Azure and AWS)
• Experience in facilitating business process design and risk

What you need to enjoy and be good at for this role:

• Keen developer mindset who likes delivering good experiences for customers
• Strong control awareness in an environment with strict process controls
• Analytical approach to map user profiles to access models/roles and maintain them
• Collaborative mindset to implement and maintain best practice security protocols
• Inquisitive nature to question processes and drive innovation
• Self-starter with initiative to communicate and cooperate with others
• Ability to adapt to high pressure situations and priorities
• Willingness to have a lighthearted approach with team members

We will arrange for successful candidates to have background checks, including reference and police checks completed as part of the on-boarding process.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Other

#J-18808-Ljbffr

---