Cybersecurity Staff Engineer - CIAM Consultant

Responsibilities

Kforce's client in McKinney, TX is seeking a senior-level Cybersecurity Staff Engineer specializing in Identity and Access Management (IAM) with a strong focus on Customer Identity and Access Management (CIAM). This is a hybrid role requiring onsite work in the Allen/McKinney area, TX, 2-3 days per week. Local or DFW-area candidates are strongly preferred.

Summary:

In this role, you will support both customer-facing identity solutions and enterprise IAM initiatives, helping design, implement, and support secure authentication and access services. You will work closely with application teams, security, and infrastructure partners to deliver scalable and secure identity solutions. This role also involves hands‑on work with SailPoint Identity Security Cloud, Active Directory, and Microsoft Entra  (Azure AD) to support identity lifecycle management, access governance, role-based access, and application onboarding.

• Designing and supporting customer registration and login experiences, multi‑factor authentication, passwordless access, account recovery, and profile management
• Leading CIAM integrations across web, mobile, SaaS, and partner applications
• Analyzing identity data, roles, groups, entitlements, and access models; supporting SSO and federation integrations; contributing to IAM documentation, architecture diagrams, runbooks, and audit evidence
• Mentoring junior engineers, managing multiple IAM initiatives, and providing regular status updates to leadership

• 8+ years of experience in Identity and Access Management, cybersecurity engineering, or a related field
• Strong hands‑on experience with Customer Identity and Access Management (CIAM) and customer-facing identity use cases
• Strong hands‑on experience with SailPoint Identity Security Cloud (ISC), including identity profiles, access profiles, roles, entitlements, certifications, workflows, provisioning, and lifecycle management
• Strong experience with Active Directory, including users, groups, OUs, service accounts, and group-based access
• Strong experience with Microsoft Entra  / Azure AD, including enterprise applications, app registrations, conditional access, MFA, groups, and identity governance
• Experience designing and supporting customer registration, login, MFA, account recovery, and profile management flows
• Experience supporting B2B, B2C, partner, vendor, and external-user identity models
• Experience with SSO, federation, and provisioning technologies, including SAML, OAuth 2.0, OIDC, LDAP, and SCIM
• Experience with identity governance, access reviews, RBAC, and entitlement management
• Ability to troubleshoot authentication, authorization, federation, provisioning, MFA, and access issues
• Strong communication skills and ability to work independently in a hybrid environment

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.