IAM Support Engineer (L2 Level) - ForgeRock

At To.Scale, we help ambitious tech teams grow with the right people and we do it fast. We're now hiring on behalf of a global enterprise client for a ForgeRock L2 IAM Support Engineer. If you’re solid on IAM fundamentals and want to deepen your expertise in ForgeRock within a serious production environment, this might be for you.

We’re looking for a mid-level IAM Engineer to support the daily operations of a large-scale ForgeRock identity environment.

This isn’t just a “reset passwords and move on” support role. You’ll be helping to keep access stable across systems that matter, performing daily health checks, triaging incidents, supporting integrations and ensuring smooth user authentication. You’ll work with L3 engineers, infrastructure teams and developers to keep everything running securely and smoothly.

This is a great opportunity for someone who’s hands-on with IAM and looking to deepen their experience with ForgeRock in a real-world enterprise setting.

What you will effectively be doing:

• Monitor the ForgeRock Identity Platform (AM, IDM, DS, IG) to ensure operational stability
• Investigate and resolve support tickets (typically P3/P4 level) related to authentication, user access, and system behavior
• Participate in daily health checks and sanity testing of core components
• Troubleshoot access issues and assist with integrations (including Social IDPs like Google or Facebook)
• Participate in incident response and help with root cause analysis for recurring problems
• Coordinate with other internal teams (infra, apps, global ops) to ensure timely resolution
• Document recurring issues and contribute to internal knowledge base and runbooks
• Support operational reporting and basic monitoring tasks
• Join command center calls and keep stakeholders updated on issue progress

This role is for someone who already has working knowledge of IAM, and is ready to take it up a notch by supporting real ForgeRock systems.

You’re likely someone who:

• Is comfortable triaging access-related issues in live environments
• Knows what SAML or OAuth actually mean in practical terms
• Can dig through logs to find useful clues and isn’t afraid of learning on the fly
• Can follow operational procedures, but also raise your hand when you spot a pattern
• Wants to keep growing into more complex IAM engineering over time
  

Here’s what that looks like in terms of skills:

• Hands-on experience with ForgeRock components (AM, IDM, DS, IG) or another IAM platform like Okta, Ping, or IBM Security Verify
• Solid grasp of IAM protocols: SAML, OAuth2, OIDC
• Familiarity with LDAP, ticketing systems like ServiceNow, and monitoring/log tools
• Basic scripting skills (Shell or Python). Nothing too fancy, just enough to debug or automate repetitive checks
• Comfortable working in enterprise environments with multiple teams and shifting priorities
• Flexible enough to participate in rotational shifts, including occasional on-call

If you're the kind of person who enjoys making systems smoother, faster and safer AND you want to build your IAM skills in a real-world, production-grade setup, we’d love to hear from you.

Your daily rate is based on 220 working days per year.

This will be converted into a fixed monthly fee that already includes your paid time off, meaning you're not just paid for the days you log, but also for your vacation days and local bank holidays.

In case you work with us as a FTE (which might be a possibility for Greece and Portugal based talent), local company benefits will apply.