Senior CIAM Engineer: PingOne/Okta, SSO & MFA

Washington State Department of Transportation; Olympia (WA); Hybrid; USD 114,000 - 148,000; Full time

Benefits offered by this job

Medical and dental insurance

Flexible spending account (FSA)

Retirement plan

Job summary

Washington Health Benefit Exchange in Olympia, WA, is seeking a Senior Identity and Access Management Engineer to design, develop, and support customer IAM solutions using PingOne IdentityCloud, with transition to Okta where applicable. You will manage user lifecycle automation, access controls, and secure authentication across cloud platforms.

The role requires strong experience with CIAM, SSO, MFA, and integration of IAM systems with enterprise apps, collaborating with IT, security, and

Qualifications

• Minimum 7 years in CIAM/IAM implementation and support.
• Hands-on with PingOne IdentityCloud and Okta.
• Experience with OAuth, OIDC, and SAML protocols.
• DevOps and CI/CD deployments for IAM configurations.
• Experience with REST API integrations for IAM services.

Responsibilities

• Design and support CIAM solutions using PingOne IdentityCloud; transition to Okta where applicable.
• Automate user lifecycle provisioning and deprovisioning with RBAC/ABAC.
• Develop connectors, workflows, APIs, and scripts to integrate IAM with enterprise apps.
• Implement SSO, MFA, and risk-based authentication across cloud platforms.
• Migrate CIAM capabilities from PingOne to Okta; plan, design, and test architecture changes.
• Collaborate with IT, Security, Delivery, and product teams to ensure IAM requirements are met.
• Participate in sprint planning and design discussions to incorporate identity needs early.

Skills

CIAM

SAML

OAuth

OIDC

MFA

CI/CD

Python

Java

REST APIs

SIEM

Education

7+ years IAM experience

Tools

PingOne IdentityCloud

Okta

Job description

Washington Health Benefit Exchange in Olympia, WA, is seeking a Senior Identity and Access Management Engineer to design, develop, and support customer IAM solutions using PingOne IdentityCloud, with transition to Okta where applicable. You will manage user lifecycle automation, access controls, and secure authentication across cloud platforms.

The role requires strong experience with CIAM, SSO, MFA, and integration of IAM systems with enterprise apps, collaborating with IT, security, and