Senior IAM Engineer

Senior IAM Engineer

Responsibilities

• Architect and manage PingFederate and Okta-based AuthN/AuthZ solutions.
• Lead the migration of AuthN/AuthZ flows from Okta to PingFederate.
• Implement PAT and SSA.
• Configure and maintain multi-environment IDP instances, manage claim mappings, and secure secrets in vaults.
• Ensure compliance with FedRAMP controls (FIPS encryption, audit logging).
• Collaborate with automation and SRE teams to integrate identity flows into CI/CD pipelines and smoke-tests.
• Develop end-to-end test suites for authentication, authorization, MFA, and token lifecycle scenarios.
• Create and maintain detailed runbooks, architecture diagrams, and developer onboarding guides.

Requirements

• 10+ years in identity management, IAM engineering, or security engineering roles.
• Deep expertise with PingFederate, Okta, or similar enterprise IDP platforms.
• Strong understanding of OAuth2/OIDC, SAML, and token-based authentication.
• Experience with compliance frameworks such as FedRAMP, SOC2, or PCI-DSS.
• Proficient in scripting (Python, Bash) for automation and integration tests.
• Excellent communication, documentation, and stakeholder engagement skills.

Preferred Skills

• Familiarity with AWS Cognito, Azure AD B2C, or similar cloud identity services.
• Experience with serverless identity integrations (Lambda triggers).
• Knowledge of directory services and federation protocols.
• Disaster recovery planning for identity systems.

Benefits

• Work in a fast-paced and collaborative environment.
• Drive meaningful impact through cutting-edge identity solutions.
• Join a team passionate about innovation and technology.
• Be a part of a company shaping the future of digital engineering.