IAM Backend Engineer

Position Name – IAM Backend Engineer

Type of hiring – Fulltime/Subcon

Location – Toronto, ON (2-3 Days onsite/ Week)

Job Description:

IAM Backend Engineer (ForgeRock 7.5 + Java)

We are seeking a highly skilled IAM Backend Engineer with strong hands-on experience in ForgeRock 7.5, Java backend development, and modern authentication platforms.

This role focuses on building and enhancing backend services to support a decoupled UI-driven authentication architecture, enabling a modern
Single Page Application (SPA) login
experience. The
Engineer
will play a key role in implementing secure, scalable, and user-friendly authentication workflows.

Solution Overview

The platform will leverage ForgeRock Identity Platform 7.5 with a fully decoupled UI and authentication architecture.

Key features include:

• SPA-based login experience
• Two-step login flow (username + password)
• Username masking for fraud prevention
• Multi-factor authentication (MFA) using hard and soft token OTPs
• Future enhancements: push notifications and SMS-based OTP

The backend will expose secure authentication services consumed by the UI, allowing dynamic rendering of authentication flows.

Key Responsibilities

• Design and implement backend enhancements to support new UI architecture and authentication workflows
• Develop backend-driven validation, error handling, and UI-compatible response structures
• Perform updates and enhancements across ForgeRock modules in line with solution design
• Integrate backend services with token-based authentication mechanisms (WAM)
• Ensure compatibility with SPA-based state management
• Develop and execute unit tests to ensure code quality and stability
• Conduct static and dynamic security scans; remediate identified vulnerabilities
• Manage configuration updates for build and deployment pipelines
• Support application deployments across development, staging, and production environments
• Implement logging, monitoring, and audit capabilities
• Collaborate with DevOps teams for smooth delivery and operational handover
• Prepare and maintain technical documentation, including:
• Swagger / OpenAPI specifications
• Technical design documents
• Release notes and deployment guides

Required Skills & Experience

• Strong hands-on experience with ForgeRock Identity Platform 7.5
• Solid backend development experience using Java
• Experience with modern authentication and authorization frameworks
• Knowledge of token-based authentication (OAuth, JWT, WAM)
• Experience designing secure and scalable backend services
• Familiarity with REST APIs and SPA integrations
• Understanding of security best practices and IAM concepts
• Experience with CI/CD pipelines and deployment processes

Nice-to-Have Skills

• Experience with push notification-based authentication
• SMS-based OTP authentication with resend functionality
• Exposure to advanced MFA solutions and fraud prevention techniques