Senior IAM Architect – Identity & Access, 24x7 On-Call

Deloitte France; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Deloitte Global seeks an IAM/CIAM engineer to develop, implement and support systems that manage digital identities and access controls across Deloitte applications. You will collaborate on secure access, on-call duties, and cross-functional initiatives in a global setting.

Ideal candidates bring 5+ years in CIAM, strong Java skills, and hands-on experience with Ping Identity and Azure Entra ID, plus exposure to Docker/Kubernetes environments.

Qualifications

• 5+ years' experience in CIAM vendor platforms, preferably Azure Entra Id and Ping Identity.
• 2+ years' hands-on Java development (Java/J2EE); familiarity with Groovy and/or JavaScript.
• Experience customizing PingAM UI and writing integration scripts.
• Experience building and promoting Java components with PingAM/PingIDM SDK to production.
• Hands-on IAM/CIAM installation and configuration.
• Working knowledge of authentication standards: SAML, OAuth 2.0, OpenID Connect.
• Willingness to participate in a rotating 24x7x365 on-call schedule.
• Advanced LDAP and directory services knowledge.
• Experience with web/mobile SSO integrations.

Responsibilities

• Develop, implement and support IAM/CIAM systems for identity and access management.
• Define the future vision for how identities and access are managed across business units and report on it.
• Collaborate with team members to ensure secure and efficient access to applications.

Skills

CIAM expertise

Java development

Authentication protocols

On-call availability

LDAP knowledge

Tools

Azure Entra ID

Ping Identity Platform

PingAM UI

PingIDM SDK

Docker

Kubernetes

Job description

Deloitte Global seeks an IAM/CIAM engineer to develop, implement and support systems that manage digital identities and access controls across Deloitte applications. You will collaborate on secure access, on-call duties, and cross-functional initiatives in a global setting.

Ideal candidates bring 5+ years in CIAM, strong Java skills, and hands-on experience with Ping Identity and Azure Entra ID, plus exposure to Docker/Kubernetes environments.