Senior Cybersecurity Engineer

DICK'S Sporting Goods

4d • $83,000 - $138,200

About The Position

At DICK’S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve. If you are ready to make a difference as part of the world’s greatest sports team, apply to join our team today!
OVERVIEW:
DICKʼS Inc. is looking for a Senior Customer Identity and Access Management (CIAM) Engineer. This role will perform as a function within our Cybersecurity and Digital Trust organization, with the primary strength of building, integrating, operating, and migrating scalable CIAM solutions. Our ultimate strategic goal is to combine and consolidate multiple customer identity platforms into a single, unified CIAM solution. This role will be the technical lead for this migration, ensuring a seamless, low-friction experience for our customers while maintaining a resilient, highly observable, and secure authentication ecosystem.

Requirements

• Proven experience successfully executing a full-scale CIAM platform migration from start to finish.
• Advanced expertise in session token management, authentication protocols (OAuth2, OIDC, SAML), and heavy API-driven architecture.
• Hands-on experience working across multiple major CIAM solutions (e.g., Auth0, Okta, Ping Identity, ForgeRock, AWS Cognito, etc.).
• Strong coding background with a preferred focus on microservices and building integrations within a complex customer ecosystem - including CI/CD pipelines.
• Experience developing or heavily influencing user interfaces for mobile applications, specifically around the login and onboarding journeys.
• Experience navigating customer-facing challenges, translating technical risks into business impact, and managing communication strategies for end-users during major changes.
• Ability to analyze fraud metrics and find the "sweet spot" where security protects the platform without hurting conversion rates or sales.
• Collaborate with customer care teams to understand and analyze customer support trends; optimizing solution delivery to reduce challenges encountered by support teams, including providing self-service resolution scenarios.

Nice To Haves

• Experience utilizing Just-In-Time (JIT) user provisioning or migration techniques to move millions of active users without requiring forced, mass password resets.
• Solid understanding of global data privacy compliance legislation (such as GDPR, CCPA/CPRA) as it relates to merging customer profile databases and managing user consent. Participate in relevant legal engagements internally and externally as required.
• Familiarity with implementing passwordless authentication, FIDO2, and Passkeys to drive down mobile user friction and eliminate credential-based attacks.
• Experience managing identity platforms that handle massive, seasonal traffic spikes (e.g., flash sales, holiday traffic) without latency or degradation.

Responsibilities

• Lead the architectural design and execution of consolidating our disparate customer identity platforms into a single target solution.
• Partner closely with product, marketing, and various business units to co-own the identity roadmap. Connect identity data to business intelligence to help drive sales, while balancing security measures against customer friction.
• Own the day-to-day lifecycle operations of user accounts, including login flows, multi-factor authentication (MFA), password resets, account recovery, regular patching, system health checks, and feature rollouts.
• Develop and maintain advanced API connections and microservices architectures linking the CIAM platform to ancillary systems like customer loyalty programs, CRMs, and marketing tech stacks.
• Collaborate on or directly support the development of user-facing interfaces, ensuring the authentication experience on mobile applications is frictionless and intuitive.
• Implement comprehensive logging, monitoring, and alerting configurations to ensure the identity platform is resilient against outages and highly visible to engineering teams.
• Serve as a core responder for customer identity-related security incidents, identifying credential stuffing, bot mitigation, fraud trends, or system vulnerabilities, and mitigating threats in real time.
• Conduct regular Quarterly Business Reviews (QBRs) and assessments to communicate platform health, migration velocity, and fraud metrics to stakeholders.

Benefits

• competitive total rewards package that could include other components such as: incentive, equity and benefits.
• All state paid leave requirements.
• A generous suite of benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed