Senior Identity & Access Management (CIAM) Engineer

Overview

The Identity Access Management (IAM) Engineer will serve as a hands-on technical resource with strong Customer Identity and Access Management (CIAM) expertise, responsible for implementing, supporting, and improving secure identity solutions for B2B, B2C, and external user populations.

This role requires solid technical experience in CIAM platforms such as Okta Customer Identity Cloud/Auth0, Okta, Ping, or Forge Rock, with strong hands-on knowledge of OAuth 2.0, OpenID Connect, SAML, JWT, SCIM, API integrations, MFA, passwordless, adaptive authentication, and customer identity lifecycle flows.

The engineer will work on CIAM implementation activities from requirements through production support, including platform configuration, application integration, testing, troubleshooting, documentation, and operational handoff.

The successful candidate should be able to operate independently on technical tasks, support CIAM design discussions, strengthen security controls, and help onboard digital applications while maintaining good user experience and compliance alignment.

Must have strong hands-on configuration, scripting, API integration, troubleshooting, and support experience in CIAM or access management environments.

This role is based out of Plano, Texas and requires coming into the office.

• Serve as a hands-on CIAM technical resource for implementation, configuration, integration, and production support.
• Configure and support CIAM solutions using Okta Customer Identity Cloud/Auth0, Okta, Ping, Forge Rock, or comparable platforms.
• Build and support customer identity flows including registration, login, MFA, passwordless authentication, social login, consent, profile management, account recovery, and progressive profiling.
• Support secure application integrations using OAuth 2.0, OpenID Connect, SAML, JWT, SCIM, REST APIs, SDKs, webhooks, and token-based authorization patterns.
• Implement B2B and B2C identity patterns for web, mobile, portal, API, eCommerce, and partner-facing applications.
• Configure platform capabilities such as Auth0 Actions, Rules, Hooks, Organizations, Management APIs, Okta Workflows, Identity Engine, Universal Directory, and Lifecycle Management.
• Develop scripts, workflows, and automation to support identity lifecycle, application onboarding, monitoring, reporting, and operational efficiency.
• Work with Cybersecurity, API, architecture, digital product, and application teams to support secure authentication and authorization patterns.
• Participate in CIAM roadmap delivery, platform modernization, migrations, and capability enhancements.
• Troubleshoot authentication, federation, token, consent, profile, directory, API, latency, and production availability issues.
• Support monitoring, alerting, logging, audit, and reporting using tools such as Splunk, ELK, Prometheus, or native platform logs.
• Implement security controls such as adaptive authentication, attack protection, bot protection, risk-based access, identity proofing integrations, and zero trust-aligned policies.
• Support privacy, regulatory, audit, and compliance requirements related to customer identity, consent, data protection, and access governance.
• Use Dev Sec Ops  practices, CI/CD pipelines, Git-based configuration management, Terraform, Ansible, or similar tools to improve repeatability and reduce manual changes.
• Create and maintain integration patterns, technical design documents, runbooks, standards, and operational handoff materials.
• Provide Level 2/Level 3 support, incident support, root cause analysis, and improvement recommendations for CIAM services.
• Share technical knowledge with team members and contribute to Agile Dev Ops delivery practices.

Compensation and Benefits:

• The expected compensation range for this position is between $80,200 - $134,250.
• Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process.
• Bonus based on performance and eligibility target payout is 8% of annual salary paid out annually.
• Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement.
• In addition to salary, Pepsi Co offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility:
  Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan.

Minimum Qualifications:

• 8+ years of overall IT experience with hands-on engineering or support background.
• 6+ years of IAM, access management, authentication, federation, or identity engineering experience.
• 4+ years of hands-on CIAM implementation or support experience for B2B, B2C, external customer, partner, or digital identity use cases.
• Hands-on experience with Okta Customer Identity Cloud/Auth0, Okta, Ping, Forge Rock,…