Customer Identity Engineer (Remote)

Inspira Financial Trust, LLC; Oak Brook (IL); Remote; USD 120,000 - 180,000; Full time

Job summary

Inspur a Financial Trust, LLC is seeking a Customer Identity Senior Engineer to own and operate a secure CIAM platform across customer-facing products. You will implement, maintain, and optimize authentication services, policies, and integrations to support uptime, compliance, and product enablement.

You will partner with product and development teams to design secure patterns using OAuth2, OIDC, and SAML, automate account lifecycles, and drive data-driven improvements in identity performance

Qualifications

• Experience with enterprise CIAM platforms and policies.
• Hands-on work with PingOne and federation protocols.
• Strong troubleshooting and automation capabilities.

Responsibilities

• Implement, configure, and maintain CIAM services on PingOne.
• Onboard applications, APIs, and services into CIAM ecosystem.
• Manage patching, maintenance, and capacity planning.
• Develop runbooks and procedures for identity services.
• Build automation for account lifecycle and provisioning workflows.
• Collaborate with product teams to secure integrations using OAuth2, OIDC, SAML.
• Monitor authentication performance and issue data-driven improvements.
• Serve as escalation point for complex auth issues.
• Lead incident, problem, and change management for CIAM systems.
• Propose CIAM strategy via metrics and threat monitoring.

Skills

CIAM concepts

Scripting

Troubleshooting

Security

Tools

PingOne

DaVinci orchestration

OAuth2

OIDC

SAML

Job description

Position Summary:

The Customer Identity Senior Engineer is responsible for building, maintaining , and operating the company's customer identity platform. This role ensures secure, reliable, and scalable authentication and access services across multiple customer-facing products.

The Customer Identity Senior Engineer serves as the technical owner for customer identity lifecycle, authentication policies, and platform integrations. This position requires strong troubleshooting skills, scripting capability, and a service-oriented mindset to support business requirements, uptime, compliance, and product team enablement.

Duties & Responsibilities:

• Implement, configure, and maintain enterprise customer identity and access management (CIAM) services on PingOne , including authentication policies and DaVinci orchestration flows .
• Support onboarding of new applications, APIs, and services into the customer identity ecosystem.
• Manage platform lifecycle activities including patching, maintenance, and capacity planning.
• Develop and maintain operational runbooks, standards, and procedures for identity services.
• Build and maintain automation for customer account lifecycle and access provisioning workflows.
• Partner with product and development teams to establish secure integration patterns using OAuth2, OIDC, and SAML.
• Monitor and optimize authentication performance and error handling through data-driven insights.
• Serve as the escalation point for complex authentication and customer access issues.
• Lead incident, problem, and change management activities related to CIAM systems.
• Devise and propose CIAM strategy through stakeholder information gathering , monitoring of metrics , analysis of emerging threats, and understanding of best practice trends .