Senior Engineer, Cybersecurity

NielsenIQ

22h

About The Position

This role focuses on managing and integrating Customer Identity and Access Management (CIAM) and workforce Identity and Access Management (IAM) solutions. The engineer will be responsible for end-to-end integrations, designing and implementing authentication flows, and ensuring the security and reliability of identity services. The position involves working with various identity providers and orchestration tools, partnering with application owners, and contributing to governance and documentation.

Requirements

Deep focus on Ping Identity (PingFederate, PingOne) and Okta.
Experience with DaVinci orchestration workflows.
Proficiency in designing, implementing, and maintaining authentication flows using SAML, OIDC/OAuth 2.0.
Experience with token handling, claims mapping, scopes, and attribute transformation.
Experience building and operating DaVinci identity workflows.
Experience leading application onboarding and migration efforts into Azure Entra ID.
Experience engineering and enforcing MFA and adaptive authentication policies.
Experience integrating CIAM platforms with identity lifecycle and governance systems (e.g., SailPoint, HR‑driven sources, event‑based provisioning).
Experience designing and supporting non‑human identity use cases.
Experience developing and maintaining automation, telemetry, and reporting for IAM and CIAM operations using scripting and dashboards.
Experience serving as a senior technical escalation point for complex IAM/CIAM incidents.
Experience contributing to IAM and CIAM governance.
Experience producing high‑quality technical documentation, runbooks, and reference architectures.
Experience with scripting.

Nice To Haves

Experience with API‑based integrations.

Responsibilities

Own end‑to‑end CIAM and workforce IAM integrations for enterprise and custom applications, with deep focus on Ping Identity (PingFederate, PingOne) , Okta , and DaVinci orchestration workflows , supporting complex authentication and identity journeys.
Design, implement, and maintain customer and workforce authentication flows using SAML, OIDC/OAuth 2.0 , and API‑based integrations, including token handling, claims mapping, scopes, and attribute transformation.
Build and operate DaVinci identity workflows to orchestrate authentication, registration, step‑up MFA, risk signals, identity verification, and downstream integrations across Ping, Okta, and third‑party services.
Lead application onboarding and migration efforts into Azure Entra ID for workforce identity, ensuring alignment with enterprise IAM standards, Conditional Access policies, and audit requirements.
Engineer and enforce MFA and adaptive authentication policies across CIAM and workforce platforms, including exception handling, conditional logic, and troubleshooting across global user populations.
Partner with application owners, product teams, and engineers to standardize authentication architectures , eliminate bespoke identity implementations, and align applications to approved CIAM and IAM patterns.
Integrate CIAM platforms with identity lifecycle and governance systems (e.g., SailPoint, HR‑driven sources, event‑based provisioning) to support user lifecycle, access governance, and compliance requirements.
Design and support non‑human identity use cases , including service accounts, API clients, secrets, certificates, and token‑based access for applications and integrations.
Develop and maintain automation, telemetry, and reporting for IAM and CIAM operations using scripting and dashboards to improve visibility, reduce manual effort, and support compliance (SOX, SOC2, GDPR).
Serve as a senior technical escalation point for complex IAM/CIAM incidents , performing root‑cause analysis across identity providers, federation layers, token issuance, and application integrations.
Contribute to IAM and CIAM governance , defining enforceable standards, patterns, and guardrails that translate security policy into operational reality.
Participate in cross‑functional initiatives including application modernization, platform consolidation, CIAM architecture evolution, and identity service reliability improvements .
Produce high‑quality technical documentation, runbooks, and reference architectures , and provide knowledge transfer to strengthen team capability and reduce single‑point dependencies.
Balance project delivery with BAU operational support , ensuring high availability and reliability of IAM and CIAM services while advancing platform maturity.