Job Title: Customer Identity & Access Management (CIAM) Engineer

Location: Phoenix, AZ -Onsite -Only Local Candidates

Experience Required:10+ Years

 Visa Eligibility : H1B, H4-EAD, E3, OPT-EAD, USC, TN only 

 No GC or GC-EAD profiles

 Employment Type: Contract (C2C/W2)

Job Summary

We are seeking an experienced Customer Identity & Access Management (CIAM) Engineer with 8–10 years of IT experience and strong expertise in designing, implementing, and supporting enterprise Customer Identity and Access Management (CIAM) solutions. The ideal candidate will have hands-on experience with Ping Identity and/or Strivacity, authentication protocols, identity federation, and secure customer authentication solutions. This role involves collaborating with application, security, and architecture teams to deliver scalable and secure identity services across enterprise applications.

Key Responsibilities

• Configure, implement, and support Customer Identity & Access Management (CIAM) solutions using Ping Identity and/or Strivacity platforms.
• Onboard web, mobile, and API-based applications to enterprise CIAM services.
• Design and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), OAuth 2.0, OpenID Connect (OIDC), and SAML integrations.
• Develop and maintain customer registration, authentication, password management, profile management, and self-service identity workflows.
• Troubleshoot authentication, authorization, federation, and access management issues.
• Integrate enterprise applications using REST APIs and identity federation protocols.
• Collaborate with security teams, architects, developers, and business stakeholders to deliver secure identity solutions.
• Support CIAM platform upgrades, enhancements, production support, and operational activities.
• Develop technical documentation, onboarding guides, integration standards, and operational runbooks.
• Ensure compliance with enterprise security policies, authentication standards, and identity governance best practices.
• Participate in testing, deployment, and continuous improvement of CIAM services.

Required Skills

• 8–10 years of experience in Identity & Access Management (IAM) and Customer Identity & Access Management (CIAM).
• Hands-on experience with Ping Identity and/or Strivacity platforms.
• Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and SCIM.
• Experience implementing SSO, MFA, identity federation, and customer authentication solutions.
• Strong experience integrating applications using REST APIs and identity protocols.
• Knowledge of customer identity lifecycle management and authentication workflows.
• Familiarity with cloud platforms such as AWS, Azure, or GCP.
• Experience supporting web, mobile, and API-based applications.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and collaboration skills.
• Experience working in Agile/Scrum environments.

Preferred Qualifications

• Ping Identity Certification is highly preferred.
• Experience with adaptive authentication and risk-based access management.
• Experience with customer identity lifecycle management.
• Banking, Financial Services, or FinTech domain experience.
• Knowledge of Microsoft Identity and Access Management solutions is an added advantage.