Staff Engineer - Infrastructure

IND Staff Cloud Engineer - GCC008 We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.

Overview Our organization is modernizing customer identity and access management to support secure, seamless authentication across all digital channels. We are seeking a Staff IAM Engineer to serve as the technical lead for our Customer Identity and Access Management (CIAM) platform team in Hyderabad, India . You will design and implement customer identity solutions using the Ping x ForgeRock Identity Platform , while balancing hands-on technical execution with team-level leadership. You'll guide daily design decisions, sprint delivery, and technical quality standards—ensuring our CIAM capabilities are secure, scalable, and deliver measurable business value across web, mobile, and API channels. This role is critical to enabling frictionless customer experiences while maintaining enterprise-grade security and compliance.

You'll design and evolve CIAM patterns—updating existing ones to meet business objectives and building new ones that strengthen security or drive value—while reviewing code, guiding sprint cadence, unblocking your team, and making daily decisions that keep momentum. TECHNICAL LEADERSHIP & TEAM GUIDANCE Own CIAM design and implementation decisions for the team, guiding user story creation and refinement to ensure technical clarity and feasibility. Help refine features into well-defined user stories and technical spikes; ensure stories are sized and scoped appropriately for team velocity and sprint capacity. Guide sprint planning and backlog refinement, leading technical trade-off discussions that balance security, performance, and delivery timelines. Write and review policy scripts, API integration code, and orchestration logic to implement identity flows and custom abstractions. Provide hands-on code and configuration reviews, ensuring delivery aligns with definition of done, security standards, and engineering best practices. CIAM PLATFORM DESIGN & IMPLEMENTATION Design and implement CIAM capabilities using Ping x ForgeRock products, including authentication flows (OAuth 2.0, OIDC, SAML), MFA, password less authentication, adaptive/risk-based authentication, identity federation, and user journey orchestration. Configure and customize identity flows using Ping policies, orchestration rules, policy scripts, and SDKs to meet functional requirements. Design, develop, and own a custom abstraction layer that simplifies Ping Identity integration, enabling application teams to implement secure identity patterns without deep platform expertise. Own end-to-end integrations with web/mobile applications, backend APIs, and API gateways. Evolve existing patterns to meet changing objectives. SECURITY & COMPLIANCE Embed security by design in all CIAM implementations; partner with security teams on threat modeling, design reviews, fraud detection, and anomaly detection strategies. Ensure CIAM solutions meet privacy, regulatory, and compliance requirements (OIDC, OAuth2, NIST, GDPR, CCPA, NYDFS). Own non-functional requirements including performance targets, system resiliency, and availability SLAs. DEVOPS, RELIABILITY & INCIDENT RESPONSE Implement and maintain CI/CD pipelines for CIAM configuration and code using GitHub Actions, Jenkins, or similar tools. Promote configuration-as-code and Infrastructure-as-Code (IaC) practices across CIAM delivery. Support automated testing, logging, monitoring, and alerting for identity services to enable rapid incident detection. Troubleshoot production issues and lead incident resolution in collaboration with SRE and platform teams, working toward rapid response times. MENTORING, EXPERTISE & STRATEGIC ALIGNMENT Mentor CIAM engineers and