Senior IAM Architect: SSO/MFA, CIAM Leader

PepsiCo Deutschland GmbH; Plano (TX); On-site; USD 111,000 - 185,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Disability insurance

Dependent Care Reimbursement Accounts

Employee Assistance Program (EAP)

Insurance (Life/Accident)

Defined Contribution Retirement Plan

Job summary

PepsiCo hires an Authentication, SSO/MFA and CIAM SME/Architect to lead secure identity solutions across workforce, partner, and customer use cases. The role requires hands-on design, implementation, and governance of modern authentication across hybrid environments, with close collaboration to enterprise architects, cybersecurity, and business teams.

Based in Plano, TX, the candidate will mentor engineers, drive DevOps practices, and deliver scalable IAM capabilities including Okta and related

Qualifications

• 15+ years of IT experience with enterprise IAM, cybersecurity, architecture, or application security.
• 10+ years hands-on experience in authentication, SSO, MFA, federation, and access management.
• 7+ years with Okta or comparable identity platforms such as Ping, Microsoft Entra ID, ForgeRock, SiteMinder.
• Strong knowledge of SAML, OAuth 2.0, OIDC, JWT, LDAP, API security and modern authentication flows.
• Experience integrating SaaS/cloud/on-prem apps with SSO/MFA solutions.

Responsibilities

• Serve as the senior SME/Architect for Authentication, SSO, MFA, federation, and CIAM across enterprise platforms.
• Design secure authentication patterns for cloud, on-prem, mobile, API, B2B, workforce and customer apps.
• Lead technical architecture for SSO integrations (SAML, OAuth 2.0, OIDC, WS-Federation).
• Define MFA/adaptive authentication strategies including risk-based access and passwordless options.
• Architect CIAM solutions for customer registration, login, consent, profiling, social login, and secure API access.
• Translate business requirements into secure, scalable IAM solutions with cross-team partnership.
• Provide hands-on leadership for complex integrations, RCA, production support, and platform stability.
• Develop reference designs, standards, and playbooks for authentication capabilities.
• Drive platform modernization, automation, and roadmap for IAM services (Okta).
• Ensure governance, auditing, logging, and compliance through secure authentication controls.

Skills

SAML

OAuth 2.0

OIDC

CIAM

Zero trust

Passwordless

Security architecture

Scripting (PowerShell/Python/JS)

Agile/DevOps

Education

BS/BA degree

Tools

Okta

PingFederate

SiteMinder

ForgeRock

Azure AD B2C

Job description

PepsiCo hires an Authentication, SSO/MFA and CIAM SME/Architect to lead secure identity solutions across workforce, partner, and customer use cases. The role requires hands-on design, implementation, and governance of modern authentication across hybrid environments, with close collaboration to enterprise architects, cybersecurity, and business teams.

Based in Plano, TX, the candidate will mentor engineers, drive DevOps practices, and deliver scalable IAM capabilities including Okta and related