Senior/Lead Software Engineer - Distributed System, Security Engineering - IAM/Identity and Access Management

About the Role

Key Responsibilities

• Lead the design, development, and implementation of IAM solutions for FICO Platform.
• Integrate IAM platforms with various enterprise and cloud-native applications.
• Drive the adoption of authentication and authorization standards including SAML, OAuth 2.0, OIDC, and JWT.
• Work closely with product, security, infrastructure, and application development teams to implement IAM best practices.
• Own and improve IAM policies, procedures, and lifecycle management processes.
• Lead troubleshooting and performance tuning across identity services.
• Mentor junior engineers and contribute to technical leadership across the team.
• Participate in architectural discussions and roadmap planning for IAM capabilities.

Requirements

• 6+ years of hands-on experience in IAM technologies, with at least 2 years in a technical leadership role.
• Strong development experience with Java & Spring frameworks, especially in security and integration contexts.
• Deep expertise in SAML, JWT, OAuth 2.0, and OIDC.
• Strong working knowledge of Okta, Ping Identity Gateway, PingAIC (PingAM & PingIDM), and OpenAM/OpenDJ.
• Proficient in LDAP, directory structures, and identity provisioning/deprovisioning.
• Experience with Docker, Kubernetes, and container orchestration best practices.
• Experience with scripting and automation using Shell, Python, or Groovy.
• Proven ability to integrate IAM solutions with SaaS platforms & applications.
• Familiarity with CI/CD pipelines (Jenkins, GitLab, Azure DevOps) and infrastructure-as-code (optional but desirable).
• Solid understanding of security protocols, token lifecycle, and zero trust principles.
• Experience with IAM migration projects (e.g., OpenAM to Ping or Okta).
• Cloud IAM experience with AWS IAM or Azure AD.
• Relevant certifications (e.g., Okta Certified Consultant, Ping Identity Certified Professional, CISSP, etc.).

Nice to Have

• Familiarity with infrastructure-as-code (optional but desirable).

Qualifications

• Relevant certifications (e.g., Okta Certified Consultant, Ping Identity Certified Professional, CISSP, etc.).

Benefits & Perks

• Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.
• An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.
• The targeted base pay range for this role is: $105,000 to $165,000 with this range reflecting differences in candidate knowledge, skills and experience.