CIAM Engineer: Hands-on Identity & Access, Onsite Plano

PepsiCo; Plano (TX); On-site; USD 80,000 - 134,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Disability Insurance

Paid time off

Job summary

PepsiCo is seeking an Identity Access Management (IAM) Engineer to lead CIAM implementation and support for B2B, B2C, and external users. You will work hands-on across Okta/Auth0/Ping/ForgeRock platforms with strong OAuth 2.0, OIDC, SAML, and JWT expertise to build secure identity flows and integrate applications.

The role requires office presence in Plano, Texas, with collaboration across cybersecurity, API, and product teams to deliver secure authentication patterns and modern CIAM

Qualifications

• 8+ years of IT experience with hands-on engineering or support background.
• 6+ years IAM/access management/authentication experience.
• 4+ years CIAM implementation or support for B2B/B2C/external identities.
• Hands-on CIAM with Okta/Auth0/ Ping/ForgeRock or comparable platforms.
• Strong knowledge of OAuth 2.0, OIDC, SAML 2.0, JWT, SCIM, REST APIs, SDKs, webhooks, API security.
• Experience configuring CIAM apps, connections, login/signup, redirect URIs, custom domains, branding.
• Understanding of OAuth/OIDC flows and token lifetime management.
• Experience integrating CIAM with web, mobile, portals, APIs, and partner apps.
• MFA, passwordless, social login, consent, profile management, and consent capture.
• Experience with claims, API permissions, RBAC, user metadata, and lifecycle management.
• Experience troubleshooting CIAM redirects, SSO sessions, token errors, and login issues.
• Familiar with security controls like adaptive MFA, bot protection, risk-based access, and audit logging.
• Scripting or development in Java/Node.js/JavaScript/Python/PowerShell; experience with CI/CD tools like Terraform/Ansible/Jenkins/GitHub Actions.
• BS/BA in Computer Science/Information Security/Engineering or equivalent.
• Certifications like Okta or CISSP are a plus.
• Experience deploying CIAM in AWS/Azure/hybrid; Docker/Kubernetes knowledge a plus.
• Strong communication and collaboration across global teams.

Responsibilities

• Serve as a hands-on CIAM technical resource for implementation, configuration, integration, and production support.
• Configure and support CIAM solutions using Okta/Auth0/Ping/ForgeRock or comparable platforms.
• Build and support customer identity flows including registration, login, MFA, passwordless, social login, consent, profile management, and recovery.
• Support secure application integrations using OAuth 2.0, OIDC, SAML, JWT, SCIM, REST APIs, SDKs, webhooks, and token patterns.
• Implement B2B and B2C identity patterns for web, mobile, portal, API, eCommerce, and partner apps.
• Configure platform capabilities: Actions, Rules/Hooks, Organizations, Management APIs, Workflows, Identity Engine, Lifecycle Management.
• Develop scripts and automation to support identity lifecycle, onboarding, monitoring, reporting, and efficiency.
• Collaborate with Cybersecurity, API, architecture, and product teams on secure authentication patterns.
• Participate in CIAM roadmap, platform modernization, migrations, and capability enhancements.
• Troubleshoot authentication, federation, token, consent, profile, directory, API, latency, and production availability issues.
• Support monitoring, alerting, logging, audit and reporting with Splunk/ELK/Prometheus or native logs.
• Implement security controls like adaptive authentication, bot protection, risk-based access, and zero-trust policies.
• Support privacy, regulatory, audit, and compliance requirements related to customer identity and data protection.
• Use DevSecOps practices and CI/CD pipelines to improve repeatability; create runbooks and design documents.
• Provide Level 2/3 support, incident handling, root cause analysis, and improvement recommendations.
• Share knowledge and contribute to Agile DevOps delivery.

Skills

CIAM engineering

Identity security

Scripting

DevSecOps

Java

Python

PowerShell

REST APIs

Education

BS/BA in Computer Science, Information Security, Engineering, or related

Tools

Okta Customer Identity Cloud/Auth0

Okta

Ping Identity

ForgeRock

OAuth 2.0

OpenID Connect

SAML 2.0

JWT

SCIM

REST APIs

SDKs

Webhooks

Terraform

Ansible

Jenkins

GitHub Actions

Azure DevOps

Splunk

ELK

Prometheus

Job description

PepsiCo is seeking an Identity Access Management (IAM) Engineer to lead CIAM implementation and support for B2B, B2C, and external users. You will work hands-on across Okta/Auth0/Ping/ForgeRock platforms with strong OAuth 2.0, OIDC, SAML, and JWT expertise to build secure identity flows and integrate applications.

The role requires office presence in Plano, Texas, with collaboration across cybersecurity, API, and product teams to deliver secure authentication patterns and modern CIAM