Senior Identity and Access Management Engineer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Technical Olympia, WA, US

5 days ago Requisition

Salary Range: $ To $ Annually

The mission of Washington Health Benefit Exchange (Exchange) is to radically improve how Washington residents secure health insurance through innovative and practical solutions, an easy‑to‑use customer experience, our values of integrity, respect, equity and transparency, and by providing undeniable value to the health care community.

The Exchange is a public‑private partnership that operates Washington Healthplanfinder, the eligibility and enrollment portal used by one in four Washington residents to obtain health and dental coverage. Through this platform, and with support from a Customer Support Center and statewide network of in‑person navigators and brokers, individuals and families can shop, compare and enroll in private, qualified health plans (as defined in the Affordable Care Act) or enroll in Washington Apple Health, the state Medicaid program.

The Exchange embraces the following equity statement adopted by our Board of Directors:

Equity is fundamental to the mission of the Washington Health Benefit Exchange. The process of advancing toward equity and becoming anti‑racist is disruptive and demands vigilance to dismantle deeply entrenched systems of privilege and oppression. While systemic racism is a root cause of many societal inequities, we must also use an intersectional approach to address all forms of bias and oppression, which interact and often exacerbate racial inequities.

To be successful, we must recognize the socioeconomic drivers of health and focus on people and places where needs are greatest. As we listen to community, we must hold ourselves accountable to responding to recommendations to remedy inequitable policies, systems, or practices within the Exchange s area of influence. Our goal is that all Washingtonians have full and equal access to opportunities, power and resources to achieve their full potential.

The Senior Identity and Access Management Engineer position focuses on designing, developing, and supporting customer IAM solutions using Ping One Identity Cloud to provide secure and seamless digital experiences to customers. Key responsibilities include managing user lifecycle automation, implementing access controls, integrating applications with IAM systems through industry‑standard protocols, and enhancing security via Single Sign-On (SSO), Multi‑Factor Authentication (MFA), and risk‑based policies.

The position also involves troubleshooting authentication flows, ensuring regulatory compliance, and collaborating with Information Technology (IT), security, and product teams to deliver robust IAM integrations across cloud platforms.

• Design, develop, implement, and support customer IAM solutions utilizing Ping One Identity Cloud, and support transition to Okta where applicable.
• Build and maintain automated processes for user lifecycle management, including provisioning, deprovisioning, and role‑ or attribute‑based access controls.
• Develop and maintain custom connectors, workflows, APIs, and scripts to integrate IAM systems with enterprise applications.
• Integrate web, mobile, and API‑based cloud applications with IAM platforms using protocols such as SAML, OAuth, and OIDC.
• Implement SSO, adaptive authentication, MFA, and risk‑based policies to enhance security and user experience.
• Configure and troubleshoot federation and OAuth/OIDC flows, and ensure secure session handling across systems.
• Implement and manage workflows for customer registration, login, account recovery, and profile management.
• Support migration of CIAM capabilities from Ping One Identity Cloud to Okta, including configuration, testing, validation, troubleshooting, deployment.
• Assist with migration planning, architecture design, and implementation of access and identity flows in Okta.
• Ensure IAM architecture and solutions adhere to security, privacy, regulatory, and consumer data…