Senior CIAM Engineer — Build Secure Identity Journeys

PepsiCo Deutschland GmbH; Plano (TX); On-site; USD 80,000 - 134,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Paid time off

Equal Opportunity Employer

Job summary

PepsiCo is seeking an Identity Access Management Engineer to design, implement, and support CIAM solutions for B2B, B2C, and partner ecosystems. The role requires hands-on work across Okta Customer Identity Cloud/Auth0, OAuth 2.0, OIDC, SAML, JWT, and SCIM with strong API integration skills.

The successful candidate will configure and optimize CIAM platforms, manage authentication flows, MFA, and passwordless strategies, and collaborate with Cybersecurity and architecture teams to ensure secure,

Qualifications

• 8+ years IT with hands-on engineering or support background.
• 6+ years IAM/access management experience; 4+ years CIAM for B2B/B2C.
• Hands-on CIAM implementation with Okta/Auth0/Ping/ForgeRock.
• Strong knowledge of OAuth 2.0, OIDC, SAML, JWT, SCIM, REST APIs.
• Experience configuring login/signup flows, MFA, passwordless and consent.
• Experience with CI/CD, Git, Terraform, Ansible, or similar tools.

Responsibilities

• Serve as hands-on CIAM resource for implementation, configuration, integration, and production support.
• Configure CIAM solutions using Okta/Auth0/Ping/ForgeRock or comparable platforms.
• Build identity flows: registration, login, MFA, passwordless, consent, profile management.
• Support secure app integrations via OAuth2, OIDC, SAML, JWT, SCIM, REST APIs.
• Implement B2B/B2C identity patterns for web, mobile, API, eCommerce, partners.

Skills

CIAM engineering

Okta

Auth0

OAuth 2.0

OpenID Connect

SAML

JWT

MFA

passwordless

DevSecOps

Scripting/Automation

REST APIs

Education

BS/BA in Computer Science / Information Security / Engineering

Tools

Splunk

ELK

Prometheus

Job description

PepsiCo is seeking an Identity Access Management Engineer to design, implement, and support CIAM solutions for B2B, B2C, and partner ecosystems. The role requires hands-on work across Okta Customer Identity Cloud/Auth0, OAuth 2.0, OIDC, SAML, JWT, and SCIM with strong API integration skills.

The successful candidate will configure and optimize CIAM platforms, manage authentication flows, MFA, and passwordless strategies, and collaborate with Cybersecurity and architecture teams to ensure secure,