RemoteLeaf Logo
Log in Sign up

Principal IAM Engineer Consultant

4 weeks, 1 day ago
Anywhere
Full-time
Lead
Security Engineer
Software Development
DevSecOps Microservices REST API SAML
Apply Now
Kalles Group

Kalles Group

Kalles Group is a Seattle based cybersecurity and technology consulting firm that connects talented IT professionals with IT organizations of all sizes. They provide technology staffing and recruiting services, focusing on aligning the right people wit...

Internet Software & Services
11-50
Founded 2010
View All Jobs 3

Description

  • Develop engineering-level solution designs for CIAM initiatives, including architecture, integration patterns, data flows, security controls, operational readiness, and implementation sequencing.
  • Partner with product owners, architects, cybersecurity teams, engineering, and delivery stakeholders to align technical solutions with business priorities.
  • Coordinate technical delivery by managing dependencies, clarifying ownership, resolving blockers, and supporting predictable execution.
  • Provide technical leadership and mentoring to engineering teams on secure coding, documentation standards, and maintainable implementation approaches.
  • Identify engineering risks, technical debt, architecture drift, and security gaps that could impact platform stability or delivery quality.
  • Advise product owners on backlog sequencing, technical readiness, engineering complexity, and delivery trade-offs.
  • Facilitate technical decision-making across multiple teams and build alignment on architecture, priorities, and implementation approaches.
  • Support delivery governance by escalating recurring issues, monitoring execution quality, and partnering with leadership to resolve delivery challenges.
  • Develop reusable design patterns, technical standards, implementation guidance, and delivery playbooks for the CIAM program.
  • Document technical decisions, assumptions, risks, and mitigation strategies throughout the delivery lifecycle.

Requirements

  • 10+ years of progressive software engineering or identity engineering experience, including time at a Senior, Lead, Staff, or Principal Engineer level.
  • Deep hands-on experience designing and implementing Customer Identity and Access Management (CIAM) solutions at enterprise scale.
  • Expert knowledge of Ping Identity (PingFederate/PingOne), ForgeRock, Okta Customer Identity/Auth0, or Microsoft Entra External ID.
  • Experience producing engineering-level design documentation for OAuth 2.0, OpenID Connect (OIDC), SAML federation, authentication and authorization flows, passwordless and MFA architectures, session and token management, API security, sequence diagrams, data flows, and implementation designs.
  • Proven ability to influence architecture and engineering decisions across multiple delivery teams without direct management authority.
  • Experience identifying technical debt, architecture drift, security gaps, and implementation risks while driving practical engineering improvements.
  • Strong understanding of secure software engineering, Zero Trust principles, and cloud-native identity architectures.
  • Experience supporting high-volume customer-facing identity platforms in banking, credit unions, insurance, fintech, or similarly regulated industries.
  • Excellent communication skills and ability to build consensus across engineers, architects, product leaders, and executive stakeholders.
  • Preferred: experience leading large-scale customer identity platform migrations, consolidations, or modernization initiatives.
  • Preferred: experience supporting mergers, acquisitions, or identity platform integrations across multiple organizations.
  • Preferred: experience with Azure API Management (APIM), Cosmos DB, F5 Distributed Cloud/Shape, or similar supporting technologies.
  • Preferred: experience integrating CIAM solutions with customer-facing mobile applications and digital banking platforms.
  • Preferred: familiarity with fraud prevention and identity risk platforms such as Outseer.
  • Preferred: experience creating reusable architecture patterns, engineering standards, and technical playbooks.
  • Preferred: knowledge of Infrastructure as Code, cloud-native architectures, and DevSecOps delivery practices.

Benefits

  • Annual salary range of $160,000-$220,000.
  • Remote role.
  • Work/life balance with a manageable workload.
  • Supportive expectations around time for family, personal interests, and life outside work.
  • Simple application process.
  • Opportunity to provide feedback during the hiring process.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Torc

Software Engineer, II - Data Engineering

Torc 251-1K Road & Rail

Software Engineer at Torc, a Daimler company developing automated-truck software, building AWS-native data ingestion, ETL, and storage systems that support enterprise analytics, simulation, and machine-learning training.

United States Full-time Mid Level Software Engineer
$139k-$167k
Apache Airflow AWS Bash CI/CD Databricks Datadog Docker GitHub Actions JavaScript Jenkins Linux NumPy Pandas Python React Terraform
14 hours, 41 minutes ago
9th Way Insignia

Quantum Computing Cryptography Engineer

9th Way Insignia 51-250 Internet Software & Services

9th Way Insignia is hiring an Engineer 3, Quantum Computing/Cryptography Engineer to support the VA’s cybersecurity modernization efforts by assessing quantum-related risks and advancing quantum-resistant cryptographic solutions.

United States Full-time Lead Security Engineer
$98k-$162k
C++ Cybersecurity Encryption Java Python
14 hours, 41 minutes ago
Webflow

Senior Software Engineer, Build Loop

Webflow 251-1K Internet Software & Services

Webflow is hiring a Senior Software Engineer, Developer Productivity, to build platform tooling and migration infrastructure that helps product teams develop, deploy, and operate backend services in its next-generation monorepo.

Argentina Full-time Senior Software Engineer
Argo CD AWS Cloudflare Kubernetes NestJS Node.js Pulumi TypeScript
14 hours, 56 minutes ago
9th Way Insignia

DevSecOps Engineer

9th Way Insignia 51-250 Internet Software & Services

9th Way Insignia is hiring an Engineer 3, DevSecOps Engineer to support VA cybersecurity and modernization efforts by securing and automating software delivery across enterprise and cloud environments.

United States Full-time Lead DevOps Engineer Security Engineer
$98k-$135k
CI/CD Cybersecurity DevSecOps Git
14 hours, 56 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers