Job description

About the position As a Senior/Lead Software Engineer on the Identity and Access Management team you will lead the design, development, and implementation of IAM solutions for FICO's Decision Management Platform. You will play a critical part in designing, implementing, and evolving our enterprise IAM ecosystem, with a focus on modern authentication standards and platforms such as Okta, Ping Identity, and OpenAM/OpenDJ. Responsibilities • Lead the design, development, and implementation of IAM solutions for FICO Platform. , • Integrate IAM platforms with various enterprise and cloud-native applications. , • Drive the adoption of authentication and authorization standards including SAML, OAuth 2.0, OIDC, and JWT. , • Work closely with product, security, infrastructure, and application development teams to implement IAM best practices. , • Own and improve IAM policies, procedures, and lifecycle management processes. , • Lead troubleshooting and performance tuning across identity services. , • Mentor junior engineers and contribute to technical leadership across the team. , • Participate in architectural discussions and roadmap planning for IAM capabilities. Requirements • 6+ years of hands-on experience in IAM technologies, with at least 2 years in a technical leadership role. , • Strong development experience with Java & Spring frameworks, especially in security and integration contexts. , • Deep expertise in SAML, JWT, OAuth 2.0, and OIDC. , • Strong working knowledge of Okta, Ping Identity Gateway, PingAIC (PingAM & PingIDM), and OpenAM/OpenDJ. , • Proficient in LDAP, directory structures, and identity provisioning/deprovisioning. , • Experience with Docker, Kubernetes, and container orchestration best practices. , • Experience with scripting and automation using Shell, Python, or Groovy. , • Proven ability to integrate IAM solutions with SaaS platforms & applications. , • Familiarity with CI/CD pipelines (Jenkins, GitLab, Azure DevOps) and infrastructure-as-code (optional but desirable). , • Solid understanding of security protocols, token lifecycle, and zero trust principles. , • Experience with IAM migration projects (e.g., OpenAM to Ping or Okta). , • Cloud IAM experience with AWS IAM or Azure AD. , • Relevant certifications (e.g., Okta Certified Consultant, Ping Identity Certified Professional, CISSP, etc.). Nice-to-haves undefined Benefits • An inclusive culture strongly reflecting our core values. , • The opportunity to make an impact and develop professionally. , • Highly competitive compensation, benefits and rewards programs. , • An engaging, people-first work environment offering work/life balance, employee resource groups, and social events.

Requirements