> Markdown version of [/jobs/ext/3012271-identity-engineer](https://www.wearedevelopers.com/jobs/ext/3012271-identity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Engineer - **Company:** D R W Inc - **Location:** United States - **Experience:** Expert - **Salary:** $150,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Active Directory Federation Services, Application Programming Interfaces (APIs), Amazon Web Services, Application Services, Microsoft Azure, Software as a Service, DevOps, Identity and Access Management, Mobile Application Software, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), Linux System Administration, OAuth, OpenID, Performance Tuning, Ping (Networking Utility), Windows PowerShell, Openid Connect, Azure Active Directory, Ansible, Prometheus, Zero Trust Network Access, JSON Web Token, Security Assertion Markup Language (SAML), Systems Integration, Scripting, Google Cloud, Software Security, Customer Identity Access Management, Containerization, Pingfederate, Kubernetes, Terraform, Splunk, Docker, Ci Server, Golang - **Published:** September 20, 2026 - **Apply:** https://www.dice.com/job-detail/5a4d1af9-c8e5-4615-a149-ea7eef2eb761 ## About the Role * Strong written and verbal communication, stakeholder management, and cross-team collaboration skills. * 5+ years of experience in Identity & Access Management (IAM), or equivalent hands-on experience. * Strong hands-on experience implementing and operating commercial identity platforms and enterprise identity services (Ping AIC and PingFederate preferred, or the ability to implement required features in Ping). * Deep knowledge of SSO, federation, and authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect, JWT). * Experience integrating with directory and lifecycle systems (Active Directory/LDAP, Azure AD/Entra ID, ADFS) and provisioning (SCIM/API). * Practical experience with MFA, adaptive authentication, fine-grained authorization, and access policy enforcement. * Strong troubleshooting skills across authentication flows, certificates, TLS, networking, and related infrastructure. * Scripting/automation skills (Shell, Python, Go, PowerShell) and familiarity with IaC/CI-CD tools (Terraform, Ansible, or similar). * Comfortable working in Linux environments and producing operational runbooks and technical documentation. Bonus Points: * Experience in banking or financial services (regulated enterprise environments). * Hands-on cloud experience (AWS, Azure/Entra, or Google Cloud Platform) and container platforms (Docker, Kubernetes). * Experience with API security, OAuth/OIDC for APIs, and zero-trust architectures/use cases. * Practical experience with CIAM or customer identity projects. * Ping Identity certifications or other security/identity certifications. * + Observability and monitoring experience for identity services (Prometheus, ELK, Splunk, etc.) ## Description We are seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of our enterprise authentication and authorization services. The IAM team is responsible for the security, compliance, availability, and user experience of these services; you'll execute implementations, participate in and influence design decisions, and ensure integrations across on-prem and cloud environments meet SLAs and control requirements. The role focuses on SSO, federation, MFA, and secure access management., * Own, implement, and operate end-to-end enterprise authentication and federation solutions; drive architecture reviews and collaborate to influence design decisions, ensuring security, compliance, availability, and performance. * Implement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and JWT-based integrations. * Integrate identity solutions with enterprise, third-party applications, APIs, SaaS platforms, and custom web/mobile apps, including SSO, provisioning (SCIM/API), and secure API authentication. * Implement MFA, adaptive authentication, fine-grained access policies, and authorization models that meet security standards. * Support identity lifecycle and directory integrations with IAM and directory services (e.g., Entra ID/Azure AD, Active Directory, ADFS) and provisioning systems. * Troubleshoot authentication/authorization flows; perform root-cause analysis, incident response, and performance tuning. * Ensure compliance with security, audit, and regulatory requirements and support related assessments. * Collaborate closely with security, infrastructure, application, and DevOps teams to deliver and operate identity services. * Create and maintain runbooks, SOPs, operational procedures, and technical documentation. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Scoring 2000 Products per Request: Performance Pitfalls in Golang](https://www.wearedevelopers.com/videos/2073-scoring-2000-products-per-request-performance-pitfalls-in-golang) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)