Senior IAM Engineer: CIAM & SSO Platform Lead

Deloitte France; Philadelphia (Philadelphia County); On-site; USD 120,000 - 150,000; Full time

Job summary

Deloitte Global is looking for a senior IAM engineer to develop, deploy and support systems that govern digital identities, access controls and authentication for diverse Deloitte applications.

You will work with Ping Identity Platform, Azure EntraId, and custom Java components, with on-call rotations and strong LDAP/directory expertise to ensure secure, reliable access across the enterprise.

Qualifications

• Minimum 5 years' experience with CIAM vendors, preferably Azure Entra Id and Ping Identity Platform.
• Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
• Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve values from multiple data sources.
• Experience building, testing and promoting custom Java components using PingAM and PingIDM SDK to production.
• Hands-on experience installing and configuring IAM/CIAM products.
• Knowledge of authentication standards: SAML, OAuth 2.0, OIDC.
• Willingness to participate in a rotating 24x7x365 on-call schedule.
• Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
• Experience integrating IAM solutions for web and mobile apps with SSO integrations.
• Experience with Docker and Kubernetes.

Responsibilities

• Engage in development, implementation and support of systems that manage digital identities, access controls and authentication processes.
• Collaborate to define the future vision of how identities and access are managed, enforced and reported across business units.
• Participate in on-call coverage 24x7x365.

Skills

CIAM

Java

Groovy/JS

Ping Identity

SAML/OIDC/OAuth

LDAP

SSO integrations

On-call rotation

Docker

Kubernetes

PingAM UI

Tools

PingIDM SDK

PingAM UI

Docker

Kubernetes

LDAP tooling

Job description

Deloitte Global is looking for a senior IAM engineer to develop, deploy and support systems that govern digital identities, access controls and authentication for diverse Deloitte applications.

You will work with Ping Identity Platform, Azure EntraId, and custom Java components, with on-call rotations and strong LDAP/directory expertise to ensure secure, reliable access across the enterprise.