Sr. Identity Security & Fraud Engineer

TIAA•Charlotte, NC

8d•Onsite

About The Position

TIAA is seeking a Sr. Identity Security & Fraud Engineer to join the Digital Identity Services(DIS) team. This role will be directly responsible for designing, building, and scaling an ecosystem that power TIAA's Customer Identity and Access Management (CIAM) and Fraud technology platforms. The ideal candidate will be a builder with proven experience in Identity Security, Fraud, and Application Security; a passion for operational excellence of complex platform; and the vision to architect the next generation of AI agent-ready CIAM capabilities that directly impact TIAA's participants and partners.

Requirements

Minimum of 5+ years of demonstrated experience in designing and implementing CIAM solutions within a medium-to-large scale and complex environment with focus on Customer Identity.
5+ years of direct experience with Ping suite of products – Ping Federate, Ping Directory, Ping Access.
5+ years of engineering/development experience using Java/Python.
Experience in implementing identity orchestration tools such as Transmit Security's FlexID platform.
Experience in fraud detection and prevention using ThreatMetrix.
Experience with IAM concepts (SSO, Federation, RBAC, ABAC, ReBAC and/or FIDO2) and IAM Protocols (OAuth2, OIDC, SAML, SCIM, and/or Kerberos).
Experience creating architecture designs and roadmaps for security platforms.

Nice To Haves

Minimum of 8+ years of demonstrated experience in designing and implementing CIAM solutions within a medium-to-large scale and complex environment with focus on Customer Identity.
CIAM-related industry certification.
Experience driving decision-making with stakeholders who hold differing views on simple to complex problems, synthesizing business requirements into the best solution.
Advanced verbal and written communication skills, with the ability to interact across all levels of the organization.
Experience with independently leading Proof-of-Value (POV) and Proof-of-Concept (POC) initiatives.
Experience or familiarity with fine grained authorization solutions - Cedar, OPA, OpenFGA
Demonstrated conceptual knowledge of CI/CD and Infrastructure as Code (IaC).
Experience writing Ansible playbooks to support the installation and configuration of Ping products.
Experience with Linux operating system.

Responsibilities

Lead the design and development of strategy, architecture, and engineering of TIAA's CIAM platform.
Provide hands-on solutions design and engineering for Identity Verification, Registration, Access Management, Integrations, and API Security.
Ensure engineering designs conform to TIAA's cybersecurity and fraud management standards.
Define patterns and build frameworks related to Agentic AI, Application, and API Security.
Own Identity Security and Fraud prevention standards and act as the internal SME advisor for application teams.
Drive operational excellence, automation, scalability, and observability for the CIAM platform.
Lead cross-functional teams to triage and resolve complex production incidents.
Bring an AI-first mindset and employ agentic development skills and tools to elevate engineering productivity, delivery velocity, feature documentation, and operational excellence.