Senior Customer Identity and Access Management Engineer

Location: Hybrid or home-based in Ireland.

Position Summary:

Are you passionate about securing digital identities and creating seamless user experiences? We are looking for a Senior Customer Identity and Access Management (CIAM) Engineer to take a pivotal role in our team. This is your opportunity to work at the forefront of CIAM technology, with a strong focus on the Ping Identity suite. If you have a deep understanding of IAM principles and a mastery of Ping Identity, we invite you to help us design, implement, and maintain our cutting-edge CIAM solutions. As a senior member of our team, you will not only tackle complex technical challenges but also mentor and inspire junior engineers, shaping the future of our identity services.

Responsibilities:

Identity and Access Management:

Lead the management and administration of the full Ping Identity suite, including Ping Federate, Ping Access, Ping Directory, Ping Data Proxy, Ping Data Sync, and Ping Authorize.
Architect and manage common Ping Components, such as IdP & SP adapters, selectors, authentication policies, and more.
Deploy, configure, and troubleshoot modern authentication protocols, including OAuth, OIDC, and SAML, ensuring compliance with industry standards.
Strengthen security by configuring and deploying Multi-Factor Authentication (MFA) solutions.
Oversee the entire lifecycle of digital certificates.

Engineering and Development:

Develop and maintain clean, efficient, and well-documented code and scripts, with a preference for Java & TypeScript.
Configure and deploy APIs to extend and integrate our CIAM solutions.
Thrive in a DevOps model, contributing to our CI/CD pipelines and automation efforts.

Infrastructure and Operations:

Operate within our cloud-based infrastructure, with a preference for AWS.
Manage and maintain containerized environments.
Perform JVM tuning for optimal performance.
Ensure the high availability and disaster recovery readiness of our CIAM platform.
Manage and analyze logs using our advanced logging and monitoring tools.

Team and Project Leadership:

Work independently, taking ownership of tasks and resolving complex issues with autonomy.
Communicate effectively with both internal teams and external customers.
Mentor and guide junior engineers, fostering a culture of growth and knowledge sharing.
Collaborate with your team in an Agile work environment.

Qualifications:

A minimum of 5 years of hands-on experience with the Ping Identity suite.
Thorough understanding of Identity and Access Management (IAM) for both enterprise and customer-facing applications.
Strong coding and scripting abilities (Java & TypeScript are preferred).
In-depth knowledge of OAuth, OIDC, and SAML.
Knowledge of System for Cross-domain Identity Management (SCIM).
Experience with API configuration and deployment.
Strong experience with Linux environments (navigating, tuning, etc.).
Excellent problem-solving and communication skills.

Preferred Qualifications:

Solid understanding of cloud infrastructure (AWS preferred).
Experience with containerized environments (e.g., Docker, Kubernetes).
Experience with load testing methodologies and tools.
Experience with JVM tuning.
Any experience with intaking security reports and creating solutions to address those reports.
Understanding data privacy laws and regulations (e.g., GDPR, CCPA).
Experience working in a DevOps culture.
Familiarity with Agile methodologies.

What We Offer:

A great Team and culture – please see our colleague video.
An exciting career as an integral part of a world-leading software company providing solutions for architecture, engineering, and construction - watch this short documentary about how we got our start.
An attractive salary and benefits package.
A commitment to inclusion, belonging, and colleague well-being through global initiatives and resource groups.
A company committed to making a real difference by advancing the world’s infrastructure for a better quality of life, where your contributions help build a more sustainable, connected, and resilient world. Discover our latest user success stories for an insight into our global impact.

#LI-KT1 #LI-Ireland #LI-Remote #LI-Hybrid

About Bentley Systems

Around the world, infrastructure professionals rely on software from Bentley Systems to help them design, build, and operate better and more resilient infrastructure for transportation, water, energy, cities, and more. Founded in 1984 by engineers for engineers, Bentley is the partner of choice for engineering firms and owner-operators worldwide, with software that spans engineering disciplines, industry sectors, and all phases of the infrastructure lifecycle. Through our digital twin solutions, we help infrastructure professionals unlock the value of their data to transform project delivery and asset performance. www.bentley.com

Equal Opportunity Employer:

Bentley is proud to be an equal opportunity employer and considers for employment all qualified applicants without regard to race, color, gender/gender identity, sexual orientation, disability, marital status, religion/belief, national origin, caste, age, or any other characteristic protected by local law or unrelated to job qualifications.

Senior Customer Identity and Access Management Engineer

Benefits

Job Description