Lead Identity Authentication Engineer

Employer

American National Group Services LLC

Lead Identity Authentication Engineer

One Moody Plaza, Galveston, TX (remote possible)

$ - $ per year

Monday - Friday, 8:00 am to 4:30 pm

• Lead the design and development of security policies, custom integration with IAM Systems using identity standards such as SAML2, WS-Federation, Kerberos, OAuth2, SCIM, and LDAP.
• Provide technical leadership and strategic direction across enterprise teams for PingID and Ping Federated authentication systems.
• Provide leadership for the implementation of authentication, authorization, MFA, SSO, Federation, and Directory services concepts.
• Manage the service request or project schedule, communicate directly with business users, and act as the supervisor for small team projects (as a team lead or small project facilitator) for task delegation.
• Provide leadership for enforcing coding standards and guidelines while reviewing team members' work, ensuring standards and best practices are followed.
• Respond promptly to production issues by serving on an on-call rotation for the 24‑hour support of the team's systems as well as providing escalation support as needed.
• Provide leadership and support for MFA, OAuth, SAML, SSO, Federated authentication, directory services technologies including LDAP, SCIM, web servers, etc., along with web services technologies such as REST and SOAP.
• Prepare the initial problem definition, define the project scope and objectives, and determine specific requirements to be satisfied.
• Design system solutions for all levels of service requests and apply cybersecurity guidelines/principles.
• Lead the team for designing and developing custom modules, plugin‑based Java, and Ping SDK as per requirements; integrate with Ping and Unit Test; and assist with deployment.

Bachelor's degree in Information Technology, Information Systems, Systems and Network Administration, Cybersecurity, Computer Science or closely related field.

5 years of experience in identity engineering related position.

• Five years' experience with Ping Federate, Ping  Ping One Risk .
• Five years' experience working with LDAP to generate IDP and SP initiated SSO request using POST and Redirect Protocols.
• One year of supervisory/management experience.
• Five years' experience in identity authentication engineering position.
• Experience utilizing SCIM.
• Experience in designing and developing custom modules, plugin‑based Java, and Ping SDK.

American National offers a comprehensive benefits package supporting employees' health, financial security, and well‑being, including multiple medical plan options, dental and vision coverage, basic life insurance, and health savings accounts. Employees are automatically enrolled in a company‑funded 401(k) plan, receive paid time off and holidays, and work in an inclusive, people‑first culture that values flexibility, work‑life balance, professional growth, and a casual dress environment.

American National is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, genetic information or any other legally protected categories. American National is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.