Principal IAM Engineer, Consultant

Kalles Group

Principal IAM Engineer Consultant leading secure, scalable CIAM design for regulated financial services clients. Defining authentication architectures, integration patterns, and engineering standards across delivery teams.

Posted 8/6/2026full-timeRemote • 🇺🇸 United StatesLead💰 $160,000 - $220,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in designing and implementing enterprise-scale Customer Identity and Access Management (CIAM) solutions, with a strong focus on secure software engineering and cloud-native identity architectures. Proven ability to lead technical teams, influence architectural decisions, and deliver high-quality engineering solutions in regulated financial services environments.

Highest-signal resume keywords

Customer Identity And Access Management (CIAM)Ping IdentityOAuth 2.0OpenID Connect (OIDC)Secure Software Engineering

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Enterprise-Scale CIAM SolutionsAuthentication Flows DocumentationAPI SecuritySession ManagementToken ManagementData Flow DesignImplementation DesignMFA ArchitecturesTechnical Debt IdentificationArchitecture Drift Analysis

Soft Skills

Excellent CommunicationConsensus BuildingTechnical LeadershipMentoring

Tools & Technologies

ForgeRockOkta Customer Identity/Auth0Microsoft Entra External IDAzure API Management (APIM)Cosmos DBF5 Distributed Cloud/Shape

Industry Keywords

Financial ServicesBankingInsuranceFintechRegulated Industries

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Provide senior technical leadership for the client's Customer Identity and Access Management (CIAM) platform
Design and deliver secure, scalable identity capabilities supporting millions of customer interactions in a highly regulated financial services environment
Serve as technical authority across engineering, architecture, cybersecurity, product, and delivery teams
Transform strategic identity initiatives into detailed engineering solutions
Develop engineering-level solution designs covering architecture, integration patterns, data flows, security controls, operational readiness, and implementation sequencing
Partner with Product Owners, architects, cybersecurity teams, engineering, and delivery stakeholders to align technical solutions with business priorities
Coordinate technical delivery activities by managing dependencies, clarifying ownership, resolving blockers, and supporting predictable execution
Provide technical leadership and mentoring to engineering teams
Identify engineering risks, technical debt, architecture drift, and security gaps
Advise Product Owners on backlog sequencing, technical readiness, engineering complexity, and delivery trade-offs
Facilitate technical decision-making across multiple teams
Support delivery governance by escalating recurring issues and monitoring execution quality
Develop reusable design patterns, technical standards, implementation guidance, and delivery playbooks
Document technical decisions, assumptions, risks, mitigation strategies, authentication flows, integration patterns, sequence diagrams, token architecture, and implementation guidance
Strengthen collaboration across engineering, cybersecurity, architecture, product management, and vendor partners

Requirements

What you’ll need

10+ years of progressive software engineering or identity engineering experience, including significant time at Senior, Lead, Staff, or Principal Engineer level
Deep hands-on expertise designing and implementing enterprise-scale Customer Identity and Access Management (CIAM) solutions
Expert knowledge of Ping Identity, ForgeRock, Okta Customer Identity/Auth0, or Microsoft Entra External ID
Experience producing engineering-level design documentation for OAuth 2.0, OpenID Connect (OIDC), and SAML federation
Experience documenting authentication and authorization flows
Experience with passwordless and MFA architectures
Experience with session and token management
Experience with API security and integration patterns
Experience creating sequence diagrams, data flows, and implementation designs
Ability to influence architecture and engineering decisions across multiple delivery teams without direct management authority
Experience identifying technical debt, architecture drift, security gaps, and implementation risks
Strong understanding of secure software engineering, Zero Trust principles, and cloud-native identity architectures
Experience supporting high-volume customer-facing identity platforms within banking, credit unions, insurance, fintech, or similarly regulated industries
Excellent communication skills and ability to build consensus across engineers, architects, product leaders, and executive stakeholders
Preferred: experience with large-scale CIAM migrations, consolidations, or modernization initiatives
Preferred: experience supporting mergers, acquisitions, or identity platform integrations
Preferred: experience with Azure API Management (APIM), Cosmos DB, F5 Distributed Cloud/Shape, or similar technologies
Preferred: experience integrating CIAM with customer-facing mobile applications and digital banking platforms
Preferred: familiarity with fraud prevention and identity risk platforms such as Outseer
Preferred: experience creating reusable architecture patterns, engineering standards, and technical playbooks
Preferred: knowledge of Infrastructure as Code, cloud-native architectures, and DevSecOps delivery practices

Benefits

Comp & perks

Work/life balance and encouragement to pursue other passions, get outside, and spend time with family
Manageable workload expectations set with clients and consultants