IAM Engineer

Job Description

About Us CCTech's mission is to transform human life by the democratization of technology. We are a well-established digital transformation company building applications in the areas of CAD, CFD, Artificial Intelligence, Machine Learning, 3D Webapps, Augmented Reality, Digital Twin, and other enterprise applications. We have two business divisions: product and consulting. simulationHub is our flagship product and the manifestation of our vision. Currently, thousands of users use our CFD app in their upfront design process. Our consulting division, with partners like Autodesk Forge, AWS, and Azure , helps Fortune 500 engineering organizations achieve digital supremacy. Job Description We are seeking an IAM Engineer (47 yrs experience) who is on the path to becoming a true specialist. You will own key portions of our identity stack—helping to architect, implement, and maintain authentication and authorization platforms and environments, while pairing closely with our Senior IAM Expert. Key Responsibilities Design and operate PingFederate and Okta-based AuthN/AuthZ solutions. Implement migration of AuthN/AuthZ flows from Okta to PingFederate. Implement PAT and SSA integrations. Configure and maintain multi-environment IDP instances, manage claim mappings, and secure secrets in vaults. Ensure compliance with FedRAMP controls (FIPS encryption, audit logging). Collaborate with SRE, DevOps, and Automation teams to integrate flows into CI/CD pipelines and smoke-test suites. Develop and maintain end-to-end test cases for authentication, authorization, MFA, and token lifecycle scenarios. Write and update runbooks, architecture diagrams, and developer-onboarding materials. Required Qualifications 4–7 years in identity management, IAM engineering, or security engineering roles. Hands-on experience with PingFederate, Okta, or equivalent enterprise IDP platforms. Solid understanding of OAuth2/OIDC protocols, SAML, and token-based authentication. Practical exposure to compliance frameworks such as FedRAMP, SOC2, or PCI-DSS. Proficiency in scripting (Python, Bash) to automate integration tests and routine tasks. Strong verbal and written communication, able to drive technical discussions and documentation. Preferred Skills Familiarity with AWS Cognito, Azure AD B2C, or similar cloud identity services. Experience implementing serverless identity extensions (e.g., Lambda triggers). Working knowledge of directory services and federation protocols. Involvement in disaster-recovery planning for identity systems. Benefits Opportunity to work with a dynamic and fast-paced IT organization. Make a real impact on the company's success by shaping a positive and engaging work culture. Work with a talented and collaborative team. Be part of a company that is passionate about making a difference through technology.