IAM Consultant - ForgeRock

Neshent Technologies

Boston, MA

Posted On: Nov 12, 2026

Posted On: Nov 12, 2026

Job Overview

Job Type

Full-time

Experience

8 - 12 Years

Salary

Depends on Experience

Work Arrangement

On-Site

Travel Requirement

0%

Required Skills

  • Microsoft Entra ID
  • ForgeRock AWS IAM
  • Identity and Access Management ( AWS IAM
  • Phishing-Resistant MFA
  • FIDO2 Security Keys
  • Windows Hello for Business ( WHfB)
  • Certificate-Based Authentication ( CBA)
  • Conditional Access Policies
  • Authentication Strength
  • SAML
  • OAuth 2.0
  • OpenID Connect ( OpenID Connect
  • Azure AD / Entra ID Security Hardening
  • AWS IAM Architecture
  • MFA Migration & Implementation
Job Description

We are looking for an experienced IAM Consultant / Delivery Lead with strong expertise in ForgeRock, Microsoft Entra ID (Azure AD), and enterprise MFA implementation. The candidate will lead IAM security hardening initiatives, focusing on migrating enterprise users to phishing-resistant MFA solutions while ensuring secure authentication and seamless user experience.

Required Skills
  • Strong hands-on experience in ForgeRock IAM and Microsoft Entra ID.

  • Expertise in enterprise IAM architecture, administration, and security hardening.

  • Experience implementing phishing-resistant MFA using FIDO2, Windows Hello for Business (WHfB), and Certificate-Based Authentication (CBA).

  • Advanced knowledge of Conditional Access policies, authentication strengths, and risk-based authentication.

  • Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and application federation.

  • Experience with enterprise MFA migration and legacy authentication decommissioning.

  • Proven experience in client-facing cybersecurity consulting and technical delivery leadership.

Roles & Responsibilities
  • Lead client workshops, technical discussions, and stakeholder meetings for IAM and MFA transformation initiatives.

  • Design and implement phishing-resistant MFA solutions using Microsoft Entra ID and ForgeRock.

  • Configure and enforce Conditional Access policies, device compliance, and risk-based authentication.

  • Lead application onboarding and integration using SAML, OIDC, and reverse-proxy approaches.

  • Drive migration from legacy MFA methods (SMS, voice, and standard push notifications) to secure authentication mechanisms.

  • Develop IAM architecture roadmaps, deployment strategies, and implementation plans.

  • Manage delivery activities, guide technical teams, and ensure successful project execution.

  • Collaborate with security, infrastructure, and application teams to strengthen enterprise identity security.


Job ID: NT222830


Posted By

Abhishek

Resource Manager