Principal Security Engineer, Customer Identity Management

Principal Security Engineer, Customer Identity Management

About PROS: PROS, Inc. is the leading offer management provider to the airline industry, helping airlines deliver seamless retail experiences designed to maximize revenue and margin growth. Powered by AI, the PROS Platform enables commercial teams to align capacity with demand and coordinate pricing, merchandising and offer strategies to construct and market optimal offers in real time. By optimizing every customer interaction, PROS helps airlines improve revenue performance and quality, increase commercial agility, attract more customers and build lasting loyalty.

Learn more at

Day in the Life of the Principal Security Engineer:
The Principal Security Engineer is responsible for working with the infosec team to define and architect PROS' Customer Identity Management (CIAM) strategy and roadmap. This role will serve as the technical leader for customer authentication, authorization, identity lifecycle management, federation, and identity governance across all customer-facing products and platforms. The individual will establish the vision, architecture, standards, and operating model that enable secure, scalable, and frictionless customer access while supporting PROS' growth, multi-tenant cloud platform strategy, and evolving regulatory requirements.

Success in this role will result in a unified customer identity platform across PROS products, simplified authentication and authorization experiences, improved customer onboarding and user administration capabilities, and consistent enforcement of access control policies. This leader will strengthen auditability and compliance readiness while building the identity foundation needed to support future AI agents, APIs, and partner integrations.

Define and own the long-term Customer Identity Management strategy and architecture. Lead the design and implementation of customer authentication and authorization services across the PROS platform. Establish standards for:
Single Sign-On (SSO) Multi-Factor Authentication (MFA) Identity Federation (SAML, OIDC, OAuth 2.0) Role-Based and Attribute-Based Access Control Customer Identity Lifecycle Management. Develop a unified identity architecture supporting multiple products, tenants, and customer organizations. Serve as the technical lead for CIAM platform selection, integration, deployment, and operational governance. Partner with product and engineering leaders to incorporate identity capabilities into new platform and product initiatives.

Establish security controls, monitoring, logging, and audit capabilities for identity-related services. Lead threat modeling, risk assessments, and security reviews focused on identity and access management. Define identity governance policies and ensure alignment with regulatory and customer security requirements. Drive adoption of industry best practices and zero-trust security principles across customer-facing systems. Work closely with Security Operations, Product Security, Platform Engineering, Compliance, and Customer Success teams to continuously improve the identity ecosystem.

Mentor engineers and architects and act as the organization's subject matter expert for identity and access management.

• About you:
  
  We are looking for candidates who possess the combination of the following achievements, skills, and behaviors: 10+ years of security engineering or platform engineering experience.
• 5+ years designing and implementing enterprise IAM or CIAM solutions.
• Deep expertise with: OAuth 2.0 OpenID Connect SAML Identity Federation MFA RBAC / ABAC Zero Trust architectures.
• Experience with cloud-native platforms and SaaS architectures.
• Experience integrating identity platforms such as Auth0, Okta, Entra , Ping Identity, Forge Rock, or similar technologies.
• Strong understanding of security architecture, threat modeling, and secure software development practices.
• Excellent communication skills and ability to influence architecture decisions across engineering organizations.
• Highly Preferred:
  Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or a related field.
• AI Fluency & Growth Mindset
  -…