Senior Engineer, IAM Platform Engineering

Cencora•Carrollton, TX

About The Position

The CIAM Platform Engineer III is a senior-level engineer responsible for designing, implementing, and optimizing Customer Identity and Access Management (CIAM) solutions that deliver secure, scalable, and seamless digital experiences for customers, patients, partners, and other external users. This role serves as a technical lead for customer identity initiatives, driving platform engineering, authentication services, API integrations, automation, and security improvements across customer-facing applications. The CIAM Platform Engineer III partners with software engineering, product, cybersecurity, architecture, and business teams to deliver modern identity capabilities including registration, authentication, authorization, consent management, customer profile management, Single Sign-On (SSO), Multi-Factor Authentication (MFA), social login, and identity federation. This role plays a key part in advancing customer identity strategy through automation, cloud-native architectures, and industry-leading security practices.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent experience.
5+ years of experience in Customer Identity and Access Management (CIAM), Identity and Access Management (IAM), software engineering, platform engineering, or related technical disciplines.
Hands-on experience implementing or supporting CIAM platforms such as Auth0, Okta Customer Identity, ForgeRock, Ping Identity, Microsoft Entra External ID, SAP Customer Data Cloud, or similar technologies.
Strong understanding of authentication and authorization protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, and federation services.
Experience integrating customer-facing applications with identity platforms through APIs, SDKs, and cloud-native services.
Experience troubleshooting complex authentication, registration, federation, and customer access issues.
Knowledge of customer identity security, identity lifecycle management, fraud prevention, and Zero Trust security principles.
Experience developing automation solutions using scripting languages such as PowerShell, Python, JavaScript, or similar technologies.

Nice To Haves

Experience supporting high-volume customer authentication environments serving external users across web, mobile, and API channels.
Experience with customer profile management, consent management, social login, and customer lifecycle management capabilities.
Familiarity with privacy regulations and compliance frameworks including GDPR, CCPA, HIPAA, or similar standards.
Experience with public cloud platforms including Microsoft Azure, AWS, or Google Cloud.
Certifications such as Okta Certified Professional, ForgeRock Certification, Microsoft Identity and Access Administrator, Security+, CISSP, or equivalent.

Responsibilities

Designs, implements, and supports enterprise CIAM platforms that provide secure, scalable, and highly available customer authentication and authorization services.
Engineers customer identity solutions supporting registration, profile management, account recovery, consent management, customer lifecycle management, and secure access to digital applications.
Develops and maintains integrations between CIAM platforms and customer-facing applications using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, REST APIs, and modern identity standards.
Leads the implementation of authentication capabilities including Single Sign-On (SSO), Multi-Factor Authentication (MFA), adaptive authentication, social identity providers, federation services, and passwordless authentication.
Designs and maintains automation solutions that streamline customer onboarding, application onboarding, identity orchestration, access management, and operational support processes.
Analyzes authentication telemetry, platform performance metrics, customer login trends, and security events to proactively identify and resolve service issues, fraud risks, and user experience challenges.
Troubleshoots complex customer authentication, federation, authorization, and integration issues across cloud and hybrid environments.
Creates and maintains architecture documentation, integration standards, technical specifications, operational procedures, and platform runbooks.
Participates in platform upgrades, migrations, patching activities, and release validation efforts to ensure platform stability, resilience, and security.
Collaborates with application development teams to integrate customer identity services into web, mobile, API, and SaaS applications.
Partners with security and privacy teams to implement Zero Trust principles, customer identity protection controls, and compliance requirements.
Provides technical guidance and mentorship to junior engineers while promoting CIAM engineering best practices and operational excellence.
Evaluates emerging identity technologies, authentication methods, and customer security capabilities to drive continuous improvement across the CIAM platform.