Senior IAM Engineer

Job Description

About Us CCTech's mission is to transform human life by the democratization of technology. We are a well-established digital transformation company building applications in CAD, CFD, Artificial Intelligence, Machine Learning, 3D Webapps, Augmented Reality, Digital Twin, and other enterprise domains. We have two business divisions: product and consulting. simulationHub is our flagship product and the manifestation of our vision used by thousands for CFD simulation in the design phase. Our consulting division, with partners like Autodesk Forge, AWS, and Azure , supports Fortune 500 engineering organizations in achieving digital excellence. Job Description We are looking for a Senior IAM Engineer to design, implement, and maintain authentication and authorization platforms. You will lead compliance mapping and ensure smooth transitions across environments. Responsibilities Architect and manage PingFederate and Okta-based AuthN/AuthZ solutions. Lead the migration of AuthN/AuthZ flows from Okta to PingFederate. Implement PAT and SSA. Configure and maintain multi-environment IDP instances, manage claim mappings, and secure secrets in vaults. Ensure compliance with FedRAMP controls (FIPS encryption, audit logging). Collaborate with automation and SRE teams to integrate identity flows into CI/CD pipelines and smoke-tests. Develop end-to-end test suites for authentication, authorization, MFA, and token lifecycle scenarios. Create and maintain detailed runbooks, architecture diagrams, and developer onboarding guides. Requirements 10+ years in identity management, IAM engineering, or security engineering roles. Deep expertise with PingFederate, Okta, or similar enterprise IDP platforms. Strong understanding of OAuth2/OIDC, SAML, and token-based authentication. Experience with compliance frameworks such as FedRAMP, SOC2, or PCI-DSS. Proficient in scripting (Python, Bash) for automation and integration tests. Excellent communication, documentation, and stakeholder engagement skills. Preferred Skills Familiarity with AWS Cognito, Azure AD B2C, or similar cloud identity services. Experience with serverless identity integrations (Lambda triggers). Knowledge of directory services and federation protocols. Disaster recovery planning for identity systems. Benefits Work in a fast-paced and collaborative environment. Drive meaningful impact through cutting-edge identity solutions. Join a team passionate about innovation and technology. Be a part of a company shaping the future of digital engineering.