Sr. Identity Security & Fraud Engineer

Sr. Identity Security & Fraud Engineer

TIAA is seeking a Sr. Identity Security & Fraud Engineer to join the Digital Identity Services(DIS) team. This role will be directly responsible for designing, building, and scaling an ecosystem that power TIAA's Customer Identity and Access Management (CIAM) and Fraud technology platforms. The ideal candidate will be a builder with proven experience in Identity Security, Fraud, and Application Security; a passion for operational excellence of complex platform;

and the vision to architect the next generation of AI agent-ready CIAM capabilities that directly impact TIAA's participants and partners.

Key Responsibilities and Duties

• Lead the design and development of strategy, architecture, and engineering of TIAA's CIAM platform.
• Provide hands-on solutions design and engineering for Identity Verification, Registration, Access Management, Integrations, and API Security.
• Ensure engineering designs conform to TIAA's cybersecurity and fraud management standards.
• Define patterns and build frameworks related to Agentic AI, Application, and API Security.
• Own Identity Security and Fraud prevention standards and act as the internal SME advisor for application teams.
• Drive operational excellence, automation, scalability, and observability for the CIAM platform.
• Lead cross-functional teams to triage and resolve complex production incidents.
• Bring an AI-first mindset and employ agentic development skills and tools to elevate engineering productivity, delivery velocity, feature documentation, and operational excellence.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 5+ Years Required; 7+ Years Preferred

Career Level 9IC

Required Skills:

• Minimum of 5+ years of demonstrated experience in designing and implementing CIAM solutions within a medium-to-large scale and complex environment with focus on Customer Identity.
• 5+ years of direct experience with Ping suite of products - Ping Federate, Ping Directory, Ping Access.
• 5+ years of engineering/development experience using Java/Python.
• Experience in implementing identity orchestration tools such as Transmit Security's FlexID platform.
• Experience in fraud detection and prevention using Threat Metrix.
• Experience with IAM concepts (SSO, Federation, RBAC, ABAC, ReBAC and/or FIDO2) and IAM Protocols (OAuth2, OIDC, SAML, SCIM, and/or Kerberos).
• Experience creating architecture designs and roadmaps for security platforms.

Preferred Qualifications:

• Minimum of 8+ years of demonstrated experience in designing and implementing CIAM solutions within a medium-to-large scale and complex environment with focus on Customer Identity.
• CIAM-related industry certification.
• Experience driving decision-making with stakeholders who hold differing views on simple to complex problems, synthesizing business requirements into the best solution.
• Advanced verbal and written communication skills, with the ability to interact across all levels of the organization.
• Experience with independently leading Proof-of-Value (POV) and Proof-of-Concept (POC) initiatives.
• Experience or familiarity with fine grained authorization solutions - Cedar, OPA, OpenFGA
• Demonstrated conceptual knowledge of CI/CD and Infrastructure as Code (IaC).
• Experience writing Ansible playbooks to support the installation and configuration of Ping products.
• Experience with Linux operating system.

Related Skills

Agile Methodology, Continuous Integration and Deployment, Data Analysis, Debugging, Dev Ops, Enterprise Application Integration, Operating Systems Management, Problem Solving, Programming, Software Development, Software Development Life Cycle, Web Application Development

Anticipated Posting End Date:

Base Pay Range: $170,000/yr - $245,000/yr

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual…