Principal IAM Engineer, Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide senior technical guidance for the client's Customer Identity and Access Management (CIAM) platform.

• Design and implement secure, scalable identity solutions that support millions of customer interactions in a highly regulated financial services landscape.

• Act as the technical authority across engineering, architecture, cybersecurity, product, and delivery teams.

• Transform strategic identity initiatives into detailed engineering solutions.

• Create engineering-level solution designs that encompass architecture, integration patterns, data flows, security controls, operational readiness, and implementation sequencing.

• Collaborate with Product Owners, architects, cybersecurity teams, engineering, and delivery stakeholders to align technical solutions with business objectives.

• Manage technical delivery activities by overseeing dependencies, clarifying ownership, resolving obstacles, and ensuring predictable execution.

• Offer technical leadership and mentorship to engineering teams.

• Identify engineering risks, technical debt, architectural drift, and security vulnerabilities.

• Advise Product Owners on backlog prioritization, technical preparedness, engineering complexity, and delivery trade-offs.

• Facilitate technical decision-making across multiple teams.

• Support delivery governance by escalating recurring issues and overseeing execution quality.

• Develop reusable design patterns, technical standards, implementation guidance, and delivery playbooks.

• Document technical decisions, assumptions, risks, mitigation strategies, authentication flows, integration patterns, sequence diagrams, token architecture, and implementation guidance.

• Enhance collaboration across engineering, cybersecurity, architecture, product management, and vendor partners.

⛳️ Requirements

• Over 10 years of progressive experience in software engineering or identity engineering, including substantial time at Senior, Lead, Staff, or Principal Engineer levels.

• Extensive hands-on experience in designing and implementing enterprise-scale Customer Identity and Access Management (CIAM) solutions.

• Expert knowledge of Ping Identity, ForgeRock, Okta Customer Identity/Auth0, or Microsoft Entra External ID.

• Proven experience producing engineering-level design documentation for OAuth 2.0, OpenID Connect (OIDC), and SAML federation.

• Experience in documenting authentication and authorization processes.

• Familiarity with passwordless and MFA architectures.

• Knowledge of session and token management.

• Proficiency in API security and integration patterns.

• Experience creating sequence diagrams, data flows, and implementation designs.

• Ability to influence architectural and engineering decisions across multiple delivery teams without direct management authority.

• Experience in identifying technical debt, architectural drift, security vulnerabilities, and implementation risks.

• Strong understanding of secure software engineering, Zero Trust principles, and cloud-native identity architectures.

• Experience supporting high-volume customer-facing identity platforms in banking, credit unions, insurance, fintech, or similarly regulated industries.

• Excellent communication skills with the ability to build consensus among engineers, architects, product leaders, and executive stakeholders.

• Preferred: experience with large-scale CIAM migrations, consolidations, or modernization initiatives.

• Preferred: experience supporting mergers, acquisitions, or identity platform integrations.

• Preferred: experience with Azure API Management (APIM), Cosmos DB, F5 Distributed Cloud/Shape, or similar technologies.

• Preferred: experience integrating CIAM with customer-facing mobile applications and digital banking platforms.

• Preferred: familiarity with fraud prevention and identity risk platforms such as Outseer.

• Preferred: experience creating reusable architecture patterns, engineering standards, and technical playbooks.

• Preferred: knowledge of Infrastructure as Code, cloud-native architectures, and DevSecOps delivery practices.

🏝️ Benefits

• Work/life balance and encouragement to pursue other passions, enjoy the outdoors, and spend time with family.

• Manageable workload expectations set with clients and consultants.