Senior CIAM Architect: Migration & Identity Strategy

DICK'S Sporting Goods, Inc.; United States; A distancia; USD 83.000 - 138.000; Jornada completa

Descripción de la vacante

DICK'S Sporting Goods is seeking a Senior CIAM Engineer to lead the consolidation of customer identity platforms into a single, scalable solution within our Cybersecurity and Digital Trust team.

You will own migration architecture, collaborate with product and business units, and ensure secure, low-friction authentication across web and mobile platforms while maintaining high observability and resilience.

Formación

• Experience migrating a CIAM platform end-to-end.
• Advanced session token management and authentication protocols.
• Experience with multiple CIAM solutions (Auth0, Okta, Ping Identity, ForgeRock, AWS Cognito).
• Strong cross-functional communication and stakeholder management.

Responsabilidades

• Lead CIAM migration architecture and consolidation.
• Partner with product and marketing on identity roadmap.
• Own identity operations: MFA, login flows, resets.
• Develop API connections and microservices for CIAM integrations.
• Support mobile authentication UX and onboarding flows.
• Implement logging, monitoring, and incident response readiness.
• Conduct Quarterly Business Reviews on platform health and fraud metrics.

Conocimientos

CIAM migration

OAuth/OIDC/SAML

CIAM platforms

Microservices

API integrations

Security incident response

Cross-functional collaboration

Herramientas

Auth0

Okta

Ping Identity

ForgeRock

AWS Cognito

Descripción del empleo

At DICK'S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.

If you are ready to make a difference as part of the world's greatest sports team, apply to join our team today!

OVERVIEW:

DICKʼS Inc. is looking for a Senior Customer Identity and Access Management (CIAM) Engineer. This role will perform as a function within our Cybersecurity and Digital Trust organization, with the primary strength of building, integrating, operating, and migrating scalable CIAM solutions. Our ultimate strategic goal is to combine and consolidate multiple customer identity platforms into a single, unified CIAM solution. This role will be the technical lead for this migration, ensuring a seamless, low-friction experience for our customers while maintaining a resilient, highly observable, and secure authentication ecosystem.

Core Responsibilities

• CIAM Migration & Architecture: Lead the architectural design and execution of consolidating our disparate customer identity platforms into a single target solution.

• Product Co-Ownership & Business Strategy: Partner closely with product, marketing, and various business units to co-own the identity roadmap. Connect identity data to business intelligence to help drive sales, while balancing security measures against customer friction.

• Identity Operations: Own the day-to-day lifecycle operations of user accounts, including login flows, multi-factor authentication (MFA), password resets, account recovery, regular patching, system health checks, and feature rollouts.

• Integrations & Microservices: Develop and maintain advanced API connections and microservices architectures linking the CIAM platform to ancillary systems like customer loyalty programs, CRMs, and marketing tech stacks.

• Mobile & UI Support: Collaborate on or directly support the development of user-facing interfaces, ensuring the authentication experience on mobile applications is frictionless and intuitive.

• Observability & Resilience: Implement comprehensive logging, monitoring, and alerting configurations to ensure the identity platform is resilient against outages and highly visible to engineering teams. Security & Incident Response: Serve as a core responder for customer identity-related security incidents, identifying credential stuffing, bot mitigation, fraud trends, or system vulnerabilities, and mitigating threats in real time.

• Business Reviews: Conduct regular Quarterly Business Reviews (QBRs) and assessments to communicate platform health, migration velocity, and fraud metrics to stakeholders.

QUALIFICATIONS:

Required Skills & Experience:

• Proven experience successfully executing a full-scale CIAM platform migration from start to finish.

• Identity Technical Depth: Advanced expertise in session token management, authentication protocols (OAuth2, OIDC, SAML), and heavy API-driven architecture.

• Multi-Platform Knowledge: Hands-on experience working across multiple major CIAM solutions (e.g., Auth0, Okta, Ping Identity, ForgeRock, AWS Cognito, etc.). Developer Background: Strong coding background with a preferred focus on microservices and building integrations within a complex customer ecosystem - including CI/CD pipelines.

• Mobile UI/UX Experience: Experience developing or heavily influencing user interfaces for mobile applications, specifically around the login and onboarding journeys.

• Business Acumen & Communication: Experience navigating customer-facing challenges, translating technical risks into business impact, and managing communication strategies for end-users during major changes.

• Fraud & Friction Analytics: Ability to analyze fraud metrics and find the "sweet spot" where security protects the platform without hurting conversion rates or sales.

• Customer Support Optimization: Collaborate with customer care teams to understand and analyze customer support trends; optimizing solution delivery to reduce challenges encountered by support teams, including providing self-service resolution scenarios.

Preferred & Added Value Qualifications (Enterprise Consolidation Focus):

• Zero-Downtime Migration Strategies: Experience utilizing Just-In-Time (JIT) user provisioning or migration techniques to move millions of active users without requiring forced, mass password resets.

• Data Privacy & Compliance Regulations: Solid understanding of global data privacy compliance legislation (such as GDPR, CCPA/CPRA) as it relates to merging customer profile databases and managing user consent. Participate in relevant legal engagements internally and externally as required.

• Modern Auth Standards: Familiarity with implementing passwordless authentication, FIDO2, and Passkeys to drive down mobile user friction and eliminate credential-based attacks.

• High-Volume Scalability: Experience managing identity platforms that handle massive, seasonal traffic spikes (e.g., flash sales, holiday traffic) without latency or degradation.

VIRTUAL REQUIREMENTS:

At DICK'S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.

To ensure a smooth and secure experience, please note the following:

• Cameras must be on during all virtual interviews.

• AI tools are not permitted to be used by the candidateduring any part of the interview process.

• Offers are contingent upon a satisfactory background check which may include ID verification.

If you have any questions or need accommodations, we're here to help. Thanks for helping us keep the process fair and secure for everyone!

Targeted Pay Range: $83,000.00 - $138,200.00. This is part of a competitive total rewards package that could include other components such as: incentive, equity and benefits. Individual pay is determined by a number of factors including experience, location, internal pay equity, and other relevant business considerations. We review all teammate pay regularly to ensure competitive and equitable pay.DICK'S Sporting Goods complies with all state paid leave requirements. We also offer a generous suite of benefits. To learn more, visit www.benefityourliferesources.com.