Senior Cybersecurity Analyst (ForgeRock IAM)

Location: Singapore; hybrid work with at least 3 days in the office

Company

hirify.global is a global payments technology company serving consumers, merchants, financial institutions, and government entities in more than 200 countries and territories.

What you will do

• Design, implement, operate, harden, and tune ForgeRock Access Management solutions in multi-region production environments.
• Integrate web applications with SSO and establish federation using SAML 2.0, OpenID Connect, and OAuth 2.0.
• Configure authorization policies, adaptive authentication journeys, MFA, session management, and API authentication.
• Operate ForgeRock Directory Services, including replication, synchronization, LDAP password policies, and access control instructions.
• Build performance labs, model production traffic, and execute load tests for IAM components.
• Produce technical designs and operational documentation while serving as an IAM subject matter expert for global stakeholders and support groups.

Requirements

• At least 5 years of relevant experience with a Bachelor’s degree, or equivalent experience with an advanced degree or extensive relevant experience.
• Hands-on experience with ForgeRock, LDAP, directory administration, Apache HTTP Server, Microsoft IIS, Apache Tomcat, JBoss Web Server, Linux, and Windows.
• Strong knowledge of web-based three-tier application and security architectures, including firewalls, load balancers, and WAFs.
• Experience with API authentication and authorization using OAuth 2.0, mTLS, and JWT tokens, plus Java and scripting languages such as Shell, Python, or Groovy.
• Knowledge of incident, change, problem, and release management, Agile/Scrum and Waterfall methodologies, and tools such as Jira.
• Familiarity with GDPR, PCI DSS, ISO/IEC 27001, and applying AI/ML to IAM operations.

Culture & Benefits

• Work with globally distributed, cross-functional teams across cybersecurity, operations, database, and middleware engineering.
• Support security and compliance for payment technology operating at global scale.
• Meet or exceed service-level and availability targets while making time-sensitive decisions affecting user experience and support productivity.
• Hybrid arrangement requiring at least 3 office days per week, with final expectations confirmed by the Hiring Manager.