Customer Identity Engineer (Remote)

Position Summary:   

The Customer Identity Senior Engineer is responsible for building, maintaining, and operating the company’s customer identity platform. This role ensures secure, reliable, and scalable authentication and access services across multiple customer-facing products. 

The Customer Identity Senior Engineer serves as the technical owner for customer identity lifecycle, authentication policies, and platform integrations. This position requires strong troubleshooting skills, scripting capability, and a service-oriented mindset to support business requirements, uptime, compliance, and product team enablement. 

Duties & Responsibilities: 

• Implement, configure, and maintain enterprise customer identity and access management (CIAM) services on PingOne, including authentication policies and DaVinci orchestration flows. 

• Support onboarding of new applications, APIs, and services into the customer identity ecosystem. 

• Manage platform lifecycle activities including patching, maintenance, and capacity planning. 

• Develop and maintain operational runbooks, standards, and procedures for identity services. 

• Build and maintain automation for customer account lifecycle and access provisioning workflows. 

• Partner with product and development teams to establish secure integration patterns using OAuth2, OIDC, and SAML. 

• Monitor and optimize authentication performance and error handling through data-driven insights. 

• Serve as the escalation point for complex authentication and customer access issues. 

• Lead incident, problem, and change management activities related to CIAM systems. 

• Devise and propose CIAM strategy through stakeholder information gathering, monitoring of metrics, analysis of emerging threats, and understanding of best practice trends. 

Education & Experience: 

• 5+ years of experience in Identity and Access Management, with at least 2 years focused on customer identity (CIAM) or authentication systems. 

• Preferred 2 years of hands-on, production experience with PingOne and PingOne DaVinci. 

• Bachelor’s degree in Computer Science, Software/Computing Engineering, Applied Mathematics or related field  

• Ping Identity certifications (e.g., PingOne, DaVinci) strongly preferred; other technical certifications a plus

Skills & Abilities: 

• Strong understanding of modern identity protocols: OIDC, OAuth2, SAML, SCIM. 

• Hands-on experience administering the PingOne cloud platform and building production authentication flows in PingOne DaVinci (orchestration flows, connectors, and API-driven integrations). 

• Proven scripting and automation skills (PowerShell, Python, or comparable). 

• Demonstrated troubleshooting ability across complex cloud and hybrid authentication environments. 

• Excellent communication, documentation, and cross-functional collaboration skills. 

• Experience with adaptive MFA, risk-based access, or passkey authentication. 

• Familiarity with CI/CD pipelines, version control, and infrastructure-as-code (e.g., GitHub, Terraform). 

• Exposure to service management frameworks (ITIL), compliance-driven operations (SOC 2, HIPAA, PCI DSS), and audit support. 

• Understanding of cloud security and API integration principles. 

• Familiarity with APIs, REST/JSON, and automation frameworks. 

Other Requirements: 

• Infrequent travel less than 10% 

• Ability to occasionally work overtime or after hours  

• Prolonged periods of sitting at a desk and working on a computer 

• Infrequent on-call responsibility to support overall team incident management