Lead, Infrastructure Security Engineer - Customer Identity & Access Management
Prudential Financial1 day ago
Base Salary
$134k - $220k/yr
Responsibilities
- Design, develop, test, automate, and support secure CIAM capabilities across global customer identity platforms.
- Engineer authentication, registration, account recovery, profile management, consent, identity verification, and step-up MFA journeys using PingOne Advanced Identity Cloud.
- Develop custom journeys, decision nodes, JavaScript logic, validation rules, scripted policies, OIDC claims logic, API integrations, and reusable CIAM components.
- Customize and support PingOne AIC Hosted Pages, including branding, localization, responsive behavior, accessibility, and validation.
- Implement PingOne Protect fraud detection and adaptive authentication policies using device, behavioral, bot, identity, and external risk signals.
- Create risk-based transaction outcomes such as allow, challenge, step-up, throttle, block, or manual review.
- Integrate and troubleshoot Ping SDKs across JavaScript, React Native, Android, iOS, and Flutter applications.
- Design fine-grained authorization using scopes, roles, entitlements, resource/action models, claims, policy decision points, and policy enforcement points.
- Write production code, tests, API clients, migration utilities, validation tools, pipeline automation, operational scripts, and platform accelerators.
- Design and validate REST APIs, contracts, schemas, retries, rate limits, callbacks, error models, mocks, and automated contract tests.
- Build observability dashboards, alerts, tracing, and diagnostics with Splunk and Dynatrace while protecting customer and credential data.
- Lead high-volume identity and application migrations, including reconciliation, rollback, cutover orchestration, performance testing, and post-migration verification.
- Facilitate architecture discovery, whiteboarding, design reviews, delivery planning, risk management, approvals, and production stabilization across global teams.
Requirements
- Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or a related discipline, or equivalent professional experience demonstrating senior-level architecture and engineering depth.
- Typically 5.5 or more years of progressive IAM, security engineering, software engineering, platform engineering, or cloud experience.
- Advanced hands-on experience with PingOne Advanced Identity Cloud, including journeys, custom nodes, hosted pages, identity schemas, managed objects, APIs, policies, claims scripts, environment promotion, and troubleshooting.
- Experience integrating PingOne Protect for fraud detection, adaptive authentication, device intelligence, behavioral analytics, bot detection, identity verification, and external risk signals.
- Experience supporting customer-facing identity solutions across web, native mobile, SPA, BFF, API, microservice, partner, call-center, and machine-to-machine channels.
- Strong production coding capability in at least two of Java, JavaScript/TypeScript, Python, Spring, Node.js, React, PowerShell, or shell.
- Advanced REST API engineering experience, including resource and contract design, HTTP semantics, JSON schemas, pagination, filtering, idempotency, retries, rate limits, webhooks, callbacks, authentication headers, and contract validation.
- Strong Splunk and Dynatrace skills, including SPL, dashboards, service-level indicators, transaction correlation, alert design, distributed tracing, and root-cause analysis.
- Experience designing and executing high-volume identity and application migrations.
- Demonstrated CIAM architecture leadership, delivery leadership, independent decision-making, and ability to communicate complex identity, fraud, security, and architecture risks to technical and executive stakeholders.
- Preferred evidence includes personally delivered production implementations involving PingOne AIC, OAuth clients, Ping Identity Gateway, AWS EKS, Route 53, ALB traffic flows, granular authorization, automated negative tests, and observability.
Benefits
- Market-competitive base salary with yearly bonus potential.
- Medical, dental, vision, life, disability insurance, paid time off, and parental and military leave.
- 401(k) plan with company match up to 4% and a company-funded pension plan.
- Wellness programs offering up to $1,600 per year for eligible wellbeing reimbursements.
- Work/life resources supporting parenting, housing, senior care, finances, pets, legal matters, education, mental health, and career development.
- Education benefits for approved college enrollment and accredited certificate programs.
- Employee Stock Purchase Plan allowing eligible shares to be purchased at 85% of the lower of two purchase-period prices.
- Eligibility for a discretionary annual incentive program is subject to program rules and individual and organizational performance.
- Some benefits may not apply to part-time employees working fewer than 20 hours per week.
Tech Stack
Categories
About Prudential Financial
Prudential Financial (NYSE:PRU) was founded on the belief that financial security should be within reach for everyone, and for over 150 years, we have helped our customers reach their potential and tackle life's challenges for now and future generations to come. Today, we are one of the world’s largest financial services institutions, offering individual and institutional clients a wide array of financial products and services. With operations in the United States, Asia, Europe and Latin America, we are known for delivering on our promises to our customers, and are recognized as a trusted brand and one of the world’s most admired companies. We also have one of the most recognized and trusted brand symbols: The Rock®, an icon of strength, stability, expertise and innovation. We measure our long-term success on our ability to deliver value for shareholders, meet customer needs, and attract and develop the best talent in our industry. We offer an inclusive work environment where employees can develop to their full potential, and give back to the communities where we live and work. (Pru.us/disclaimer)