CIAM Engineer

About the Role:

The Senior Customer IAM Engineer will design, implement, and support customer identity and access management (CIAM) solutions using the Ping Identity platform. This role will focus on building secure, scalable, and user-friendly identity experiences that support millions of customers globally. The ideal candidate will work closely with application development, cybersecurity, infrastructure, and product teams to integrate CIAM solutions into digital platforms, driving secure and seamless authentication, authorization, and federation capabilities.

Engineering and Implementation:

• Design, deploy, and configure CIAM solutions using PingFederate, PingAccess, PingDirectory, PingOne, and related products.

• Define and implement customer authentication flows, single sign-on (SSO), multi-factor authentication (MFA), and passwordless strategies.

Application Integration:

• Integrate Ping Identity services with customer-facing portals, mobile applications, APIs, and third-party SaaS platforms using SAML, OAuth, OIDC, and SCIM.

Automation and Scripting:

• Automate CIAM tasks and integrations using scripting (Python, PowerShell, Groovy, etc.) and APIs.

Maintenance and Operations:

• Perform regular upgrades, patching, configuration tuning, and health checks to maintain high availability and performance.

• Troubleshoot and resolve complex identity-related issues.

Customer Experience Optimization:

• Collaborate with product and UX teams to optimize CIAM solutions for frictionless, secure customer journeys.

Security and Compliance:

• Implement identity lifecycle management, adaptive risk-based policies, and consent management to protect customer data and comply with privacy regulations (e.g., GDPR, CCPA).

Incident Response:

• Participate in the investigation and remediation of identity-related security incidents.

Collaboration:

• Partner with cross-functional teams to ensure CIAM strategies align with product goals and enterprise security standards.

Documentation and Knowledge Sharing:

• Produce technical documentation and deliver training sessions for internal teams.

• 8+ years of IT experience with at least 3-5 years specializing in Customer IAM solutions, preferably using Ping Identity products.

• Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., Ping Identity Certified Specialist, CISSP, or similar) preferred.

Technical Expertise:

• Strong knowledge of customer IAM principles: authentication, authorization, federation, adaptive MFA, and consent management.

• Hands-on experience implementing and supporting PingFederate, PingAccess, PingDirectory, PingOne, or similar identity platforms.

• Familiarity with protocols and standards: SAML, OAuth 2.0, OIDC, SCIM, LDAP.

Scripting and Automation:

• Proficiency in scripting languages (Python, PowerShell, or Groovy) and use of APIs to automate CIAM processes.

Security and Compliance:

• Understanding of regulatory requirements and data privacy laws affecting customer identity data.

Problem Solving and Communication:

• Strong troubleshooting skills and ability to translate complex technical concepts for technical and non-technical audiences.

Collaboration and Leadership:

• Experience working collaboratively in agile or cross-functional teams and driving identity engineering initiatives.

Customer-Centric Focus:

• Passion for improving customer experience through secure and innovative identity solutions.

Working Conditions:

• Occasional travel (up to 10%) may be required.

• Remote / Work-from-home eligible.

• Professional, office environment. #LI-PN

Key Skills

What's In It For You?

• Elective Benefits: Our programs are tailored to your country to best accommodate your lifestyle.
• Grow Your Career: Accelerate your path to success (and keep up with the future) with formal programs on leadership and professional development, and many more on-demand courses.
• Elevate Your Personal Well-Being: Boost your financial, physical, and mental well-being through seminars, events, and our global Life Empowerment Assistance Program.
• Diversity, Equity & Inclusion: It's not just a phrase to us; valuing every voice is how we succeed. Join us in celebrating our global diversity through inclusive education, meaningful peer-to-peer conversations, and equitable growth and development opportunities.
• Make the Most of our Global Organization: Network with other new co-workers within your first 30 days through our onboarding program.
• Connect with Your Community: Participate in internal, peer-led inclusive communities and activities, including business resource groups, local volunteering events, and more environmental and social initiatives.

Don't meet every single requirement? Apply anyway.

At TD SYNNEX, we're proud to be recognized as a great place to work and a leader in the promotion and practice of diversity, equity and inclusion. If you're excited about working for our company and believe you're a good fit for this role, we encourage you to apply. You may be exactly the person we're looking for!

We are an equal opportunity employer and committed to building a team that represents and empowers a variety of backgrounds, perspectives, and skills. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity or expression, sexual orientation, protected veteran status, disability, genetics, age, or any other characteristic protected by law.

TD SYNNEX is an E-Verify company