Sr. IAM Engineer/Hands-On Architect  (CIAM - Customer Identity Access Management)

Dice is seeking a highly skilled hands-on CIAM Architect / IAM Engineer to lead critical customer identity initiatives. This role focuses on building and scaling secure authentication experiences for external users while implementing CIAM solutions at scale, particularly within the Ping Identity ecosystem.

Responsibilities:

• Design and implement CIAM solutions supporting millions of external users (B2C / B2B2C)
• Lead hands-on development across core Ping Identity components:
• PingFederate (required)
• PingDirectory (required)
• PingMFA (required)
• PingAccess (required)
• Architect and deliver secure, low-friction customer authentication flows, including MFA and passwordless experiences
• Drive CIAM migrations, including transitions from legacy platforms such as SiteMinder and Okta to Ping
• Build and optimize identity solutions for scalability, performance, and user experience
• Implement identity federation (SAML, OAuth2, OIDC) and API security for external-facing applications
• Partner with application, security, and product teams to integrate identity into customer-facing platforms

Requirements:

• 10+ years of IT experience with a strong focus on CIAM / IAM engineering
• Proven hands-on experience (build + implementation) with PingFederate (required)
• Proven hands-on experience (build + implementation) with PingDirectory (required)
• Proven hands-on experience (build + implementation) with PingMFA (required)
• Proven hands-on experience (build + implementation) with PingAccess (required)
• Deep experience in CIAM implementations (customer identity, not just workforce SSO)
• Experience delivering high-scale identity systems (large user bases, high transaction volumes)
• Strong expertise in authentication protocols (SAML, OAuth2, OIDC)
• Proven experience with SiteMinder TO Ping migrations
• Familiarity with Okta migrations is a plus