Forgerock Jobs in Inver Grove Heights, MN (NOW HIRING)

Join a dynamic front-end engineering team focused on building secure, seamless identity experiences across web applications. This role is ideal for someone who enjoys turning complex authentication and authorization requirements into reusable, user-friendly solutions that support enterprise-scale applications.

Responsibilities

• Integrate a third-party identity platform into custom web applications using SDKs, APIs, hosted components, and authentication services.
• Build reusable front-end components, hooks, and libraries that can be adopted across multiple applications.
• Implement secure authentication and authorization flows using modern standards such as OAuth 2.0, OpenID Connect, SAML, JWTs, and PKCE.
• Connect identity workflows with application routing, state management, backend services, and session handling patterns.
• Ensure user experiences meet requirements for usability, responsiveness, accessibility, performance, branding, and internationalization.
• Partner with security, architecture, product, UX, and vendor teams to translate requirements into production-ready solutions.
• Support secure token handling, session controls, error management, and protection against common web application vulnerabilities.
• Create and maintain automated tests for identity-related workflows using modern testing tools.
• Troubleshoot authentication issues across browser, application, API, network, and vendor-platform boundaries.
• Contribute to logging, telemetry, and monitoring efforts to help measure authentication performance and user experience.
• Take part in code reviews, architecture discussions, sprint planning, backlog refinement, and production readiness activities.
• Document implementation patterns and help onboard other application teams to shared identity solutions.

Skills

• Professional front-end development experience, with hands-on work in React and TypeScript.
• Experience integrating web applications with RESTful APIs, SDKs, and backend services.
• Working knowledge of authentication and authorization concepts, including access tokens, ID tokens, refresh tokens, cookies, and browser sessions.
• Experience implementing secure sign-in and access flows in single-page or server-rendered applications.
• Strong understanding of browser security concepts such as CORS, CSP, XSS, CSRF, secure cookies, and storage risks.
• Experience with automated testing tools such as Jest, React Testing Library, Cypress, Playwright, or similar.
• Familiarity with source control, pull requests, CI/CD workflows, and automated quality checks.
• Ability to investigate issues using browser tools, logs, API traces, and monitoring platforms.
• Clear communication skills and the ability to work effectively with technical and non-technical partners.

Preferred Skills

• Direct experience with commercial identity platforms such as Ping Identity, Okta/Auth0, Microsoft Entra External ID, ForgeRock, Transmit Security, or similar solutions.
• Background in customer identity, workforce identity, or business-to-business identity environments.
• Experience building shared component libraries, design systems, or reusable platform capabilities.
• Knowledge of role-based and attribute-based access control approaches.
• Familiarity with identity federation, social login, step-up authentication, adaptive authentication, or risk-based authentication.
• Exposure to Next.js, Node.js, GraphQL, micro-frontends, or module federation.
• Experience working in cloud-based or cloud-native application environments.
• Familiarity with observability tools such as Splunk, Datadog, Dynatrace, New Relic, or Grafana.
• Experience in regulated, high-volume, retail, consumer, or enterprise environments.

Horizontal is committed to fostering an inclusive, respectful, and equitable workplace where people from all backgrounds are valued and supported. We welcome applicants who bring different perspectives, experiences, and ideas, and we encourage everyone to apply.

By applying for this position, you acknowledge and agree that Horizontal Talent may contact you regarding your application using automated technology, including phone calls, SMS/text messages, or email, which may be delivered by our virtual AI recruiter, Alex.