This role is within Visa's Cybersecurity Global Business-to-Business Identity & Access Management (B2B IAM) team, which secures access to Visa's business portals and associated services worldwide. You will design, implement, and operate IAM solutions, primarily on ForgeRock, aligning with the evolving threat landscape, regulatory obligations, and enterprise architecture. You will partner with various engineering teams to meet or exceed service level and availability targets while supporting compliance with GDPR, PCI DSS, and ISO/IEC 27001.
Responsibilities
Support SSO integrations on ForgeRock Access Management (AM) by applying standard configurations, running integration tests, and triaging issues under guidance
Assist in setting up and maintaining federation using SAML 2.0, OpenID Connect, and OAuth 2.0 (manage metadata, certificates/keys, and basic troubleshooting with logs)
Contribute to authorization policy updates and help build adaptive authentication trees/journeys in ForgeRock AM using approved patterns and templates
Participate in AM environment operations: follow runbooks to apply configuration changes, perform basic hardening/tuning in non-production, execute supervised changes in production
Help validate and tune session management configurations across regions in test, raise risks and anomalies promptly
Assist with ForgeRock Directory Services (DS): routine health checks, replication status verification, user/directory sync jobs, and backups following SOPs
Maintain LDAP settings (password policies, ACIs) and write simple automation scripts (Shell/Python) for repetitive tasks
Execute performance and load test plans created by senior engineers, collect results and highlight bottlenecks
Deploy and manage ForgeRock web/app server agents via standard procedures across IIS, Apache HTTP Server, NGINX, Apache Tomcat, Node.js, and JBoss Web Server (JWS)—initially in test, then production with oversight
Implement and support Multi-Factor Authentication (MFA) rollouts, monitor success/error rates and assist with troubleshooting
Provide L2 operational support on rotation, document KB articles and known-error records, escalate appropriately
Produce clear documentation (change records, runbooks, build/ops notes) and keep them current
Collaborate effectively with globally distributed teams and participate in change/release cadences, make timely, well-informed recommendations and escalate urgent issues
Requirements
2+ years of relevant work experience and a Bachelor's degree, OR 5+ years of relevant work experience
Nice to have:
3 or more years of work experience with a Bachelor’s degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD)
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Familiarity with web/application servers: Apache HTTP Server, Microsoft IIS, Apache Tomcat, exposure to NGINX or JWS is a plus
Familiarity with LDAP concepts and basic directory administration tasks
Familiarity with Linux fundamentals and basic Windows Server administration
Familiarity with monitoring/logging tools (e.g., Splunk or Elastic/Kibana, Grafana/Prometheus) for dashboards and alerts
Understanding of SSO/federation standards (SAML 2.0, OpenID Connect, OAuth 2.0) and MFA concepts
Working knowledge of software development practices: Git, pull requests, basic scripting (Shell/Python), and issue/change tracking in Jira (or similar)
Strong collaboration and communication skills with globally distributed teams, organized, detail oriented, and eager to learn
Awareness of release/change management and safe deployment patterns (e.g., peer reviews, maintenance windows, rollback plans)
Hands-on academic/internship experience integrating SSO or configuring IAM platforms (ForgeRock AM/DS preferred)
Exposure to API auth concepts (OAuth 2.0 flows, JWT) and mTLS basics
Basic CI/CD and infrastructure as code exposure (e.g., Jenkins/GitHub Actions/GitLab CI, Terraform) and automated config promotion between environments
Experience writing small automations (Shell/Python/Groovy) to reduce toil, interest in using analytics/ML to automate repetitive IAM tasks
Awareness of incident/change/problem management processes and how they apply to IAM operations
Understanding of why GDPR, PCI DSS, and ISO/IEC 27001 matter for access controls, logging, and data handling
Important Details
Office presence: Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager
About the Company
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories. It is dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
