IAM Lead Security Engineer Consultant

Centric Consulting is seeking an IAM Lead Security Engineer Consultant to lead engineering, modernization, and operational support for a mission-critical enterprise authentication platform.

Responsibilities

• Lead design, engineering, lifecycle management, and modernization for an enterprise access management platform
• Design and implement authentication and authorization solutions using OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, federation, Single Sign-On, MFA, passwordless authentication, and token and session management
• Own architecture decisions for platform security, scalability, availability, resilience, recoverability, and performance
• Troubleshoot complex authentication, application, network, directory, certificate, API, token, and integration issues
• Provide technical leadership during production incidents, including root-cause analysis and corrective-action planning
• Define standards for monitoring, logging, alerting, disaster recovery, operational readiness, and service reliability
• Support application onboarding and develop secure integration patterns for enterprise applications, APIs, and machine identities
• Lead platform upgrades and modernization initiatives, including migration from on-premises infrastructure to cloud-based or SaaS identity platforms
• Build automation and scripts, including Infrastructure-as-Code and CI/CD processes to improve deployment, administration, monitoring, and support
• Drive architecture reviews, produce technical documentation, and mentor engineers on modern identity technologies and engineering practices

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field (or equivalent professional experience)
• 7+ years of experience in software engineering, platform engineering, infrastructure engineering, or information security
• 5+ years designing, engineering, or supporting enterprise IAM or authentication platforms
• 4+ years hands-on experience with OAuth 2.0, OpenID Connect, SAML 2.0, LDAP, TLS/SSL, federation, Single Sign-On, MFA, and token and session management
• 5+ years troubleshooting complex issues across authentication platforms, applications, operating systems, networks, directories, certificates, APIs, and integrations
• Experience supporting highly available, mission-critical authentication platforms in large enterprise environments
• Strong knowledge of REST APIs, authentication flows, secure integration patterns, and modern identity protocols
• Experience improving platform reliability, resiliency, operational maturity, and production stability
• Scripting and automation experience using Python, JavaScript, Shell, or comparable language
• Experience administering and troubleshooting Linux or Unix environments
• Ability to produce architecture documentation, engineering standards, implementation guides, operational procedures, and troubleshooting documentation

Technologies

• OAuth 2.0, OpenID Connect, SAML 2.0, LDAP
• TLS/SSL, Single Sign-On, MFA, passwordless authentication
• Token and session management, REST APIs
• Python, JavaScript, Shell
• Linux, Unix
• ForgeRock Access Management, Okta Workforce Identity, Ping Identity, Microsoft Entra ID
• Dynamic Client Registration, Kong
• CI/CD, Infrastructure-as-Code, Git
• PKI

Location

• Hybrid role, must be local to Charlotte, NC
• In-office requirement: 3 days per week in Charlotte, NC

Travel

• 10%

Preferred Qualifications

• 3+ years implementing or engineering ForgeRock Access Management, preferably 7.x or later
• Experience with ForgeRock Access Management, Okta Workforce Identity, Ping Identity, Microsoft Entra ID, or comparable enterprise IAM platform
• Experience with Dynamic Client Registration, API gateways such as Kong, and machine-to-machine authentication
• Experience modernizing or migrating IAM platforms from on-premises environments to cloud-native or SaaS solutions
• Experience with CI/CD pipelines, Git, automated deployments, Infrastructure-as-Code, and configuration management
• Knowledge of PKI, certificate lifecycle management, encryption, secrets management, and secure key management
• Experience supporting containerized or cloud-native authentication platforms
• Experience with performance testing, capacity planning, platform upgrades, vulnerability remediation, and operational readiness
• Experience working in an ITIL-based operational environment
• Master’s degree in a relevant technical or business discipline