CIAM (Customer Identity & Access Management) Security Engineer

Job Title

CIAM (Customer Identity & Access Management) Security Engineer

Location

New Jersey, Jersey City, 07311 / Remote

Duration

6 months (Extendable)

Pay Range

$50-53/Hour on W2/C2C (All Inclusive)

Request ID

115237-1

We are seeking a highly skilled Senior CIAM Security Engineer with extensive experience in Customer Identity and Access Management (CIAM), Identity Security, and Cloud Security. The ideal candidate will be responsible for designing, implementing, and supporting secure identity solutions across enterprise environments while ensuring compliance with security standards and best practices.

Key Responsibilities

• Design, implement, and maintain enterprise-scale CIAM solutions using platforms such as PingIdentity, Okta, and Transmit Security.
• Develop and support authentication and authorization frameworks including SSO, MFA, OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Integrate identity solutions with cloud and on-premises applications.
• Administer and support LDAP, Active Directory, and other identity repositories.
• Develop automation scripts and workflows using Python, Ansible, or similar technologies.
• Manage identity lifecycle processes, access controls, and customer authentication services.
• Monitor, analyze, and report on security metrics, trends, and operational KPIs.
• Collaborate with security, cloud, infrastructure, and application teams to implement secure identity architectures.
• Ensure compliance with security frameworks and industry standards such as MITRE Telecommunication&CK, CIS Controls, and enterprise security policies.
• Troubleshoot and resolve complex authentication, authorization, and access-related issues.
• Support security audits, risk assessments, and continuous improvement initiatives.

Required Qualifications

• 11+ years of overall IT experience with a strong focus on Cyber Security and Identity Management.
• 7+ years of hands-on experience with CIAM platforms such as PingIdentity, Okta, Transmit Security, or similar solutions.
• 5+ years of experience with identity and access management technologies including:
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• Authentication and Authorization protocols
• 3+ years of experience working with LDAP, Active Directory, and user directories.
• Experience with scripting and automation using Python, Ansible, PowerShell, or Shell scripting.
• Strong understanding of identity federation, access management, and security architecture.
• Experience working in large-scale enterprise and hybrid-cloud environments.
• Knowledge of cloud platforms such as AWS and/or Client Azure.
• Experience creating executive dashboards, security reporting, and operational metrics.

Preferred Qualifications

• Experience designing and deploying CIAM solutions in cloud-native environments.
• Knowledge of Identity Governance and Administration (IGA) concepts.
• Experience with REST APIs and application integrations.
• Familiarity with Zero Trust security architecture.
• Security certifications such as:
• CISSP
• CISM
• Azure Security Engineer Associate
• AWS Security Specialty
• Okta Certified Professional/Administrator
• Ping Identity Certifications