Senior IAM Engineer (Ping Identity/CIAM)

Deloitte France; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

Deloitte Global is seeking a skilled IAM/CIAM professional to develop, implement, and support identity and access management solutions. You will work across platforms to ensure secure access to Deloitte applications and contribute to the future vision of identity governance within a truly global environment.

The role requires hands-on Java development, experience with Ping Identity Platform, Azure Entra Id, and strong knowledge of SAML, OAuth 2.0, and OIDC.

Qualifications

• Minimum 5 years’ experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
• Minimum 2 years’ hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
• Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
• Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
• Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
• Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Willingness to participate in a rotating 24x7x365 on-call schedule.
• Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
• Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
• Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.

Responsibilities

• Develop, implement and support systems that manage digital identities, access controls and authentication processes.
• Collaborate with team members to ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
• Participate in a rotating 24x7x365 on-call schedule.

Skills

CIAM vendors

Azure Entra Id

Ping Identity Platform

Java development

Groovy

JavaScript

PingAM UI

scripting

PingAM SDK

IAM/CIAM

SAML

OAuth 2.0

OIDC

on-call

LDAP

directory services

application servers

network infrastructure

SSO integrations

Docker

Kubernetes

Tools

Docker

Kubernetes

PingAM UI

PingIDM SDK

Job description

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.Work you'll doIn this interesting and diverse role, you’ll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to:

Work you'll do

• ensure secure and efficient access to Deloitte applications while upholding cyber security best practices
• define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units
• On call 24x7 responsibilities

The team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Qualifications

Do you possess the following?:

• Minimum 5 years’ experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
• Minimum 2 years’ hands‑on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
• Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
• Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
• Hands‑on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
• Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Willingness to participate in a rotating 24x7x365 on‑call schedule.
• Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
• Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third‑party applications.
• Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.