Cybersecurity Staff Engineer - CIAM Consultant

Kforce's client in McKinney, TX is seeking a senior-level Cybersecurity Staff Engineer specializing in Identity and Access Management (IAM) with a strong focus on Customer Identity and Access Management (CIAM). This is a hybrid role requiring onsite work in the Allen/McKinney area, TX, 2-3 days per week. Local or DFW-area candidates are strongly preferred.

Summary:

In this role, you will support both customer-facing identity solutions and enterprise IAM initiatives, helping design, implement, and support secure authentication and access services. You will work closely with application teams, security, and infrastructure partners to deliver scalable and secure identity solutions. This role also involves hands-on work with SailPoint Identity Security Cloud, Active Directory, and Microsoft Entra  (Azure AD) to support identity lifecycle management, access governance, role-based access, and application onboarding.

Key Responsibilities:

* Designing and supporting customer registration and login experiences, multi-factor authentication, passwordless access, account recovery, and profile management

* Leading CIAM integrations across web, mobile, SaaS, and partner applications

* Analyzing identity data, roles, groups, entitlements, and access models; support SSO and federation integrations;
Contribute to IAM documentation, architecture diagrams, runbooks, and audit evidence

* Mentoring junior engineers, managing multiple IAM initiatives, and providing regular status updates to leadership
* 8+ years of experience in Identity and Access Management, cybersecurity engineering, or a related field

* Strong hands-on experience with Customer Identity and Access Management (CIAM) and customer-facing identity use cases

* Strong hands-on experience with SailPoint Identity Security Cloud (ISC), including identity profiles, access profiles, roles, entitlements, certifications, workflows, provisioning, and lifecycle management

* Strong experience with Active Directory, including users, groups, OUs, service accounts, and group-based access

* Strong experience with Microsoft Entra  / Azure AD, including enterprise applications, app registrations, conditional access, MFA, groups, and identity governance

* Experience designing and supporting customer registration, login, MFA, account recovery, and profile management flows

* Experience supporting B2B, B2C, partner, vendor, and external-user identity models

* Experience with SSO, federation, and provisioning technologies, including SAML, OAuth 2.0, OIDC, LDAP, and SCIM

* Experience with identity governance, access reviews, RBAC, and entitlement management

* Ability to troubleshoot authentication, authorization, federation, provisioning, MFA, and access issues

* Strong communication skills and ability to work independently in a hybrid environment