Senior Customer Identity and Access Management (CIAM) Engineer

TL;DR

Senior CIAM Engineer (Ping Identity): Designing, implementing, and maintaining customer identity and access management solutions with an accent on Ping Identity suite management, modern authentication protocols, and secure API integrations. Focus on deploying OAuth/OIDC/SAML, configuring MFA and digital certificates, and ensuring high availability and disaster recovery in cloud-based infrastructure.

Location: Hybrid or home-based in the United States.

Company

World-leading software company providing solutions for infrastructure professionals in architecture, engineering, construction, transportation, water, energy, and cities.

What you will do

• Manage and administer full Ping Identity suite including PingFederate, PingAccess, PingDirectory, and related components.
• Deploy, configure, and troubleshoot OAuth, OIDC, SAML protocols, MFA solutions, and digital certificates lifecycle.
• Develop scripts in Java/TypeScript, configure APIs, and contribute to CI/CD pipelines in DevOps model.
• Operate cloud infrastructure (AWS preferred), containerized environments, perform JVM tuning, and ensure high availability.
• Mentor junior engineers, collaborate in Agile environment, and communicate with teams and customers.

Requirements

• Minimum 5+ years hands-on experience with Ping Identity suite.
• Deep understanding of IAM for enterprise and customer-facing applications.
• Strong coding/scripting in Java/TypeScript, SCIM knowledge, OAuth/OIDC/SAML expertise.
• API configuration/deployment experience, strong Linux skills.
• Excellent problem-solving and communication skills.

Nice to have

• AWS cloud infrastructure, Docker/Kubernetes, load testing, JVM tuning.
• Security reports handling, data privacy laws (GDPR, CCPA), DevOps/Agile experience.

Culture & Benefits

• Great team and inclusive culture with global initiatives and resource groups.
• Attractive salary and benefits package.
• Commitment to colleague well-being and advancing sustainable infrastructure.
• No travel required.