Sr. Customer Identity Engineer; Remote

Position: Sr. Customer Identity Engineer (Remote)
Job Description

Position Summary:

The Customer Identity Senior Engineer is responsible for building, maintaining, and operating the company’s customer identity platform. This role ensures secure, reliable, and scalable authentication and access services across multiple customer-facing products. The Customer Identity Senior Engineer serves as the technical owner for customer identity lifecycle, authentication policies, and platform integrations. This position requires strong troubleshooting skills, scripting capability, and a service-oriented mindset to support business requirements, uptime, compliance, and product team enablement.

Duties & Responsibilities:

Implement, configure, and maintain enterprise customer identity and access management (CIAM) services on Ping One, including authentication policies and DaVinci orchestration flows. Support onboarding of new applications, APIs, and services into the customer identity ecosystem. Manage platform lifecycle activities including patching, maintenance, and capacity planning. Develop and maintain operational runbooks, standards, and procedures for identity services. Build and maintain automation for customer account lifecycle and access provisioning workflows.

Partner with product and development teams to establish secure integration patterns using OAuth2, OIDC, and SAML. Monitor and optimize authentication performance and error handling through data-driven insights. Serve as the escalation point for complex authentication and customer access issues. Lead incident, problem, and change management activities related to CIAM systems. Devise and propose CIAM strategy through stakeholder information gathering, monitoring of metrics, analysis of emerging threats, and understanding of best practice trends.

Job Requirements

Education & Experience:

5+ years of experience in Identity and Access Management, with at least 2 years focused on customer identity (CIAM) or authentication systems. Minimum 2 years of hands-on, production experience with Ping One and Ping One DaVinci. Bachelor’s degree in Computer Science, Software/Computing Engineering, Applied Mathematics or related field  Ping Identity certifications (e.g., Ping One, DaVinci) strongly preferred; other technical certifications a plus Skills & Abilities:
Strong understanding of modern identity protocols: OIDC, OAuth2, SAML, SCIM. Hands-on experience administering the Ping One cloud platform and building production authentication flows in Ping One DaVinci (orchestration flows, connectors, and API-driven integrations). Proven scripting and automation skills (Power Shell, Python, or comparable). Demonstrated troubleshooting ability across complex cloud and hybrid authentication environments. Excellent communication, documentation, and cross-functional collaboration skills.

Experience with adaptive MFA, risk-based access, or passkey authentication. Familiarity with CI/CD pipelines, version control, and infrastructure-as-code (e.g., Git Hub, Terraform). Exposure to service management frameworks (ITIL), compliance-driven operations (SOC 2, HIPAA, PCI DSS), and audit support. Understanding of cloud security and API integration principles. Familiarity with APIs, REST/JSON, and automation frameworks. Other Requirements:
Infrequent travel less than 10% Ability to occasionally work overtime or after hours  Prolonged periods of sitting at a desk and working on a computer Infrequent on-call responsibility to support overall team incident management Job Details Job Type: Full-time Category:
Technology Salaried:
Salaried