CIAM Delivery Engineer - SSO, MFA & App Onboarding

Tata Consultancy Services Limited; Phoenix (AZ); On-site; USD 90,000 - 110,000; Full time

Job summary

Tata Consultancy Services Limited is seeking a CIAM Delivery Engineer to design, onboard, and support customer-facing applications on CIAM platforms such as Ping Identity and Strivacity. You will implement SSO, MFA, and identity protocols while ensuring security and scalable user experiences.

Responsibilities include configuring tenants, onboarding apps, and creating robust registration and login journeys, along with collaborating with security and architecture teams.

Qualifications

• 3–7 years of IAM/CIAM experience.
• Hands-on with Ping Identity and/or Strivacity.
• Knowledge of OAuth 2.0, OIDC, SAML, JWT, and SCIM.
• Experience integrating apps via REST APIs and identity protocols.
• Familiar with AWS, Azure, or GCP.
• Strong troubleshooting and analytical skills.

Responsibilities

• Configure Strivacity tenant, authentication journeys, and onboarding.
• Configure and support CIAM using Ping Identity and Strivacity.
• Onboard web/mobile/API apps to CIAM services.
• Implement SSO, MFA, OAuth 2.0, OIDC, and SAML integrations.
• Develop and maintain registration, login, password, and profile journeys.
• Troubleshoot authentication, federation, and access issues.
• Collaborate with application, security, and architecture teams.
• Support CIAM upgrades, enhancements, and operations.
• Create technical docs, onboarding guides, and integration standards.

Skills

IAM/CIAM

Ping Identity

Strivacity

OAuth 2.0

OIDC

SAML

JWT

SCIM

REST APIs

Cloud (AWS/Azure/GCP)

Troubleshooting

Job description

Tata Consultancy Services Limited is seeking a CIAM Delivery Engineer to design, onboard, and support customer-facing applications on CIAM platforms such as Ping Identity and Strivacity. You will implement SSO, MFA, and identity protocols while ensuring security and scalable user experiences.

Responsibilities include configuring tenants, onboarding apps, and creating robust registration and login journeys, along with collaborating with security and architecture teams.