Senior IAM Engineer - CIAM & Security Lead

Deloitte France; Charlotte (NC); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Job summary

Deloitte Global is seeking a senior IAM/CIAM engineer to lead identity and access management initiatives, implement secure access controls, and support authentication workflows across Deloitte applications. The role requires 24x7 on-call readiness and collaboration with cross-functional teams in a global setting.

Ideal candidates bring extensive experience with Ping Identity, Azure Entra Id, Java/J2EE, and IAM deployments, plus strong knowledge of SAML, OAuth 2.0, and OIDC.

Qualifications

• 5+ years' experience leading CIAM vendors (Azure Entra Id, Ping Identity).
• 2+ years' hands-on Java development (Java/J2EE); Groovy/JavaScript familiarity.
• Experience customizing PingAM UI; scripting and data retrieval from multiple sources.
• Experience building and promoting Java components using PingAM PingIDM SDK to production.
• Hands-on experience installing and configuring IAM/CIAM products.
• Working knowledge of authentication standards: SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Willingness to participate in a rotating 24x7x365 on-call schedule.
• Advanced knowledge of LDAP and directory services, app servers, and network infrastructure.
• Experience with IAM/CIAM integrations for web and mobile apps including SSO with internal/third-party apps.
• Experience with Docker and Kubernetes for deployment and orchestration.

Skills

CIAM vendors

Java development

Ping Identity

PingAM UI

IAM/CIAM

Authentication standards

LDAP

Docker

Kubernetes

SSO integrations

OpenID Connect

On-call rotation

Tools

Docker

Kubernetes

Job description

Deloitte Global is seeking a senior IAM/CIAM engineer to lead identity and access management initiatives, implement secure access controls, and support authentication workflows across Deloitte applications. The role requires 24x7 on-call readiness and collaboration with cross-functional teams in a global setting.

Ideal candidates bring extensive experience with Ping Identity, Azure Entra Id, Java/J2EE, and IAM deployments, plus strong knowledge of SAML, OAuth 2.0, and OIDC.