Sr. IAM Engineer/Hands-On Architect

Sr. IAM Engineer/Hands-On Architect (CIAM - Customer Identity Access Management)

Location : Remote

Citizenship : ANY

Duration : Through EOY - extensions possible

*** LinkedIn = MUST HAVE ***

Asap Need

10+ years hands-on CIAM/IAM expert with deep Ping Identity (PingFederate, PingDirectory, PingMFA, PingAccess), SAML/OAuth2/OIDC, and large-scale customer identity implementations/migrations (SiteMinder/Okta).

Overview

We are seeking a highly skilled, hands-on CIAM Architect / IAM Engineer to lead critical customer identity initiatives. This role is focused on building and scaling secure, seamless authentication experiences for external users.(Clients/Customers)

This is not a "paper architect" role—candidates must have deep engineering expertise and hands-on experience implementing CIAM solutions at scale. The primary focus is the Ping Identity ecosystem, including authentication, authorization, and customer identity lifecycle management.

Key Responsibilities

Design and implement CIAM solutions supporting millions of external users (B2C / B2B2C)

Lead hands-on development across core Ping Identity components:

PingFederate (required)

PingDirectory (required)

PingMFA (required)

PingAccess (required)

Architect and deliver secure, low-friction customer authentication flows , including MFA and passwordless experiences

Drive CIAM migrations , including transitions from legacy platforms such as SiteMinder and Okta to Ping

Build and optimize identity solutions for scalability, performance, and user experience

Implement identity federation (SAML, OAuth2, OIDC) and API security for external-facing applications

Partner with application, security, and product teams to integrate identity into customer-facing platforms

Required Qualifications

10+ years of IT experience with a strong focus on CIAM / IAM engineering

Proven hands-on experience (build + implementation) with:

PingFederate ( required )

PingDirectory ( required )

PingMFA ( required )

PingAccess ( required )

Deep experience in CIAM implementations (customer identity, not just workforce SSO)

Experience delivering high-scale identity systems (large user bases, high transaction volumes)

Strong expertise in authentication protocols (SAML, OAuth2, OIDC)

Proven experience with SiteMinder TO Ping migrations

Familiarity with Okta migrations is a plus

Intangibles / Ideal Fit

Highly hands-on, detail-oriented, and able to deliver high-quality engineering artifacts.

Strong communicator who can work across engineering, architecture, and application teams.

Self-directed, proactive, and able to operate in fast-paced enterprise environments.

Trusted advisor with the ability to influence and guide technical decisions.

People from Deloitte or Ping environments often perform well in this role.