Senior IAM Engineer

CBTS; Cincinnati (OH); On-site; USD 120,000 - 155,000; Full time

Job summary

CBTS in Cincinnati, OH is seeking an experienced Identity and Access Management (IAM) lead focused on Ping Federate, Ping Directory, and Auth0 integrations to design scalable, secure identity services.

This role collaborates with IT Engineering and Information Security to deliver reliable authentication, authorization, and federation solutions and to support migration between Ping Identity and Auth0 stacks.

Qualifications

• 8+ years IT experience with at least 4 years focused on Ping Directory or similar LDAP-based directory services.
• Strong understanding of identity and access management principles, including authentication, authorization, and federation.
• Experience with Ping Identity suite (PingDirectory, PingFederate, PingAccess, PingOne).
• Experience consuming and integrating on prem or hybrid cloud to AWS (or similar cloud platform).
• Proficiency in Unix/Linux.
• Familiarity with scripting languages (e.g., Shell, Python) for automation and integration.
• Solid understanding of distributed computing and directory replication strategies.
• Knowledge of application and data security concepts and common vulnerabilities.
• Experience working with offshore teams and in regulated industries (e.g., financial services) is a plus.
• Industry certifications such as CompTIA Security+, CISSP, or Ping Identity certifications preferred.
• Excellent communication skills, both verbal and written, with the ability to tailor messaging to technical and non-technical audiences.

Responsibilities

• Design, implement, and maintain Ping Identity and Auth0 infrastructure to support customer and commercial identity services.
• Define security and performance requirements for directory services and IAM integrations.
• Serve as a subject matter expert and consultant on identity-related projects.
• Collaborate with IT and IS teams to integrate Ping Directory with authentication, SSO, and federation solutions.
• Monitor and optimize directory performance, replication, and availability.
• Develop and maintain standards, procedures, and guidelines for directory services and IAM operations.
• Conduct root cause analysis and remediation of identity-related incidents and vulnerabilities.
• Support audits and compliance efforts by providing technical documentation and evidence of controls.
• Stay current with identity security threats, technologies, and best practices.
• Participate in risk assessments and recommend improvements to identity infrastructure.
• Provide technical leadership and mentoring to junior engineers and offshore teams.

Education

Bachelor’s degree in computer science, Information Systems, or equivalent experience

Master’s degree a plus

Tools

PingDirectory

PingFederate

PingAccess

PingOne

AWS

Unix/Linux

Shell

Python

Job description

This individual will be responsible for defining, delivering, and supporting customer identity and access management (IAM) solutions with a focus on Ping Federate, Ping Directory, and Auth0 (from Okta) products. The candidate will collaborate closely with the IT Engineering and Information Security teams to design scalable, secure, and high-performance identity services. They will also contribute to broader initiatives and support ongoing operations within the Enterprise Modernization organization.

The candidate will be focused on securing identity infrastructure through the implementation and management of Ping Identity, Auth0 and associated tools. Responsibilities include general IAM responsibilities, support of the Auth0 platform, and upcoming migration work between Ping Identity and Auth0 product stacks.

Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank's risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.

ESSENTIAL DUTIES & RESPONSIBILITIES:

• Design, implement, and maintain Ping Identity and Auth0 infrastructure to support customer and commercial identity services.
• Define security and performance requirements for directory services and IAM integrations.
• Serve as a subject matter expert and consultant on identity-related projects.
• Collaborate with IT and IS teams to integrate Ping Directory with authentication, SSO, and federation solutions.
• Monitor and optimize directory performance, replication, and availability.
• Develop and maintain standards, procedures, and guidelines for directory services and IAM operations.
• Conduct root cause analysis and remediation of identity-related incidents and vulnerabilities.
• Support audits and compliance efforts by providing technical documentation and evidence of controls.
• Stay current with identity security threats, technologies, and best practices.
• Participate in risk assessments and recommend improvements to identity infrastructure.
• Provide technical leadership and mentoring to junior engineers and offshore teams.

MINIMUM KNOWLEDGE, SKILLS & ABILITIES REQUIRED:

• Bachelor’s degree in computer science, Information Systems, or equivalent experience. Master’s degree a plus.
• 8+ years of IT experience, with at least 4 years focused on Ping Directory or similar LDAP-based directory services.
• Strong understanding of identity and access management principles, including authentication, authorization, and federation.
• Experience with Ping Identity suite (PingDirectory, PingFederate, PingAccess, PingOne).
• Experience consuming and integrating on prem or hybrid cloud to AWS (or similar cloud platform).
• Proficiency in Unix/Linux.
• Familiarity with scripting languages (e.g., Shell, Python) for automation and integration.
• Solid understanding of distributed computing and directory replication strategies.
• Knowledge of application and data security concepts and common vulnerabilities.
• Experience working with offshore teams and in regulated industries (e.g., financial services) is a plus.
• Industry certifications such as CompTIA Security+, CISSP, or Ping Identity certifications preferred.
• Excellent communication skills, both verbal and written, with the ability to tailor messaging to technical and non-technical audiences.