Principal IAM Engineer, Consultant

Job not on LinkedIn

🕒 August 6

🇺🇸 United States – Remote

💵 $160k - $220k / year

⏰ Full Time

🔴 Lead

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kalles Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

🔒 Cybersecurity

🔐 Security

💼 Consulting

Cybersecurity • Security • Consulting

Kalles Group is a specialized consultancy focused on providing comprehensive security solutions for businesses. They offer a range of services including cybersecurity, security compliance, incident response, IT disaster recovery, and business continuity planning. Additionally, Kalles Group provides expertise in security assessments, penetration testing, cloud security, and application security. The company is dedicated to helping organizations manage risks effectively and develop robust security strategies to ensure a secure future. Their approach integrates risk management, strategic guidance, tailored solutions, and education to empower teams in navigating the digital landscape securely.

📋 Description

• Provide senior technical leadership for the client's Customer Identity and Access Management (CIAM) platform • Design and deliver secure, scalable identity capabilities supporting millions of customer interactions in a highly regulated financial services environment • Serve as technical authority across engineering, architecture, cybersecurity, product, and delivery teams • Transform strategic identity initiatives into detailed engineering solutions • Develop engineering-level solution designs covering architecture, integration patterns, data flows, security controls, operational readiness, and implementation sequencing • Partner with Product Owners, architects, cybersecurity teams, engineering, and delivery stakeholders to align technical solutions with business priorities • Coordinate technical delivery activities by managing dependencies, clarifying ownership, resolving blockers, and supporting predictable execution • Provide technical leadership and mentoring to engineering teams • Identify engineering risks, technical debt, architecture drift, and security gaps • Advise Product Owners on backlog sequencing, technical readiness, engineering complexity, and delivery trade-offs • Facilitate technical decision-making across multiple teams • Support delivery governance by escalating recurring issues and monitoring execution quality • Develop reusable design patterns, technical standards, implementation guidance, and delivery playbooks • Document technical decisions, assumptions, risks, mitigation strategies, authentication flows, integration patterns, sequence diagrams, token architecture, and implementation guidance • Strengthen collaboration across engineering, cybersecurity, architecture, product management, and vendor partners

🎯 Requirements

• 10+ years of progressive software engineering or identity engineering experience, including significant time at Senior, Lead, Staff, or Principal Engineer level • Deep hands-on expertise designing and implementing enterprise-scale Customer Identity and Access Management (CIAM) solutions • Expert knowledge of Ping Identity, ForgeRock, Okta Customer Identity/Auth0, or Microsoft Entra External ID • Experience producing engineering-level design documentation for OAuth 2.0, OpenID Connect (OIDC), and SAML federation • Experience documenting authentication and authorization flows • Experience with passwordless and MFA architectures • Experience with session and token management • Experience with API security and integration patterns • Experience creating sequence diagrams, data flows, and implementation designs • Ability to influence architecture and engineering decisions across multiple delivery teams without direct management authority • Experience identifying technical debt, architecture drift, security gaps, and implementation risks • Strong understanding of secure software engineering, Zero Trust principles, and cloud-native identity architectures • Experience supporting high-volume customer-facing identity platforms within banking, credit unions, insurance, fintech, or similarly regulated industries • Excellent communication skills and ability to build consensus across engineers, architects, product leaders, and executive stakeholders • Preferred: experience with large-scale CIAM migrations, consolidations, or modernization initiatives • Preferred: experience supporting mergers, acquisitions, or identity platform integrations • Preferred: experience with Azure API Management (APIM), Cosmos DB, F5 Distributed Cloud/Shape, or similar technologies • Preferred: experience integrating CIAM with customer-facing mobile applications and digital banking platforms • Preferred: familiarity with fraud prevention and identity risk platforms such as Outseer • Preferred: experience creating reusable architecture patterns, engineering standards, and technical playbooks • Preferred: knowledge of Infrastructure as Code, cloud-native architectures, and DevSecOps delivery practices

🏖️ Benefits

• Work/life balance and encouragement to pursue other passions, get outside, and spend time with family • Manageable workload expectations set with clients and consultants