Senior Identity and Access Management (IAM) Engineer

Datum Technologies Group; Alpharetta (GA); On-site; USD 100,000 - 130,000; Full time

Job summary

A technology solutions provider is seeking a Senior IAM Engineer to lead IAM projects focusing on integration of third-party applications using Ping Identity solutions. The ideal candidate will have hands-on experience with PingFederate, PingOne, and AWS, along with a solid grounding in OIDC/OAuth protocols. This mid-senior level contract role is a 50/50 mix of design and hands-on development. Strong communication and problem-solving skills are essential.

Qualifications

• Strong hands-on experience with PingFederate, PingDirectory, and PingOne.
• Expertise in AWS services, including Lambda, Kafka, and OpenSearch.
• Deep understanding of OIDC/OAuth and token exchange mechanisms.

Responsibilities

• Design and build IAM solutions using PingFederate, PingDirectory, and PingOne.
• Implement OIDC/OAuth protocols and manage secure token exchange.
• Develop and deploy AWS-based architectures, leveraging Terraform for automation.

Skills

PingFederate

PingDirectory

PingOne

AWS services

Terraform

OIDC/OAuth

Communication skills

Problem-solving skills

Job description

Senior Identity and Access Management (IAM) Engineer

Job Title: IAM Engineer

Duration: Long Term Contract

Job Description:

• We are seeking a Senior Identity and Access Management (IAM) Engineer with deep expertise in Ping Identity solutions and AWS architecture.
• This role is a 50/50 mix of design and hands‑on development, requiring someone who can lead complex IAM projects, guide the team, and execute independently.
• The primary focus will be Customer Identity and Access Management (CIAM), integrating third‑party and B2B applications using Ping as the core infrastructure.

Key Responsibilities

• Design and build IAM solutions leveraging PingFederate, PingDirectory, and PingOne.
• Implement OIDC/OAuth protocols and manage secure token exchange.
• Develop and deploy complex AWS‑based architectures, including Lambda, Kafka, OpenSearch, and Terraform for automation.
• Onboard third‑party and partner applications into CIAM systems.
• Collaborate on PingOne DaVinci workflows and PingOne MFA integrations.
• Ensure scalability, security, and monitoring of IAM systems using AWS‑native tools.
• Work independently to deliver solutions and provide technical leadership to the team.

Required Skills & Experience

• Strong hands‑on experience with PingFederate, PingDirectory, and PingOne.
• Familiarity with PingOne DaVinci, PingOne MFA, and risk‑based solutions like PingOne Protect.
• Expertise in AWS services (Lambda, Kafka, OpenSearch) and Terraform.
• Deep understanding of OIDC/OAuth and token exchange mechanisms.
• Experience with CIAM implementations and onboarding external apps.
• Ability to design and build complex IAM solutions from scratch.
• Excellent communication and problem‑solving skills.

Nice-to-Have

• Experience with PingOne Advanced Services (managed hosting).
• Knowledge of risk evaluation and adaptive authentication.

Seniority Level

Mid‑Senior level

Employment Type

Contract

Job Function

Information Technology