About the role
structured by ORILead Software Engineer to drive technical leadership for Identity and Access Management modernization. As a Lead Software Engineer in our Identity and Access Management team, you will drive a team of innovators and technologists to deliver next-generation authentication and authorization solutions.
What you will do
- Lead and mentor a team to deliver high-quality, innovative identity and access management solutions.
- Modernize authentication and authorization platforms across multiple channels and domains, leveraging PingFederate, Transmit Security, and ForgeRock.
- Evaluate and prototype internal and vendor solutions for user authentication.
- Integrate anti-fraud and biometric authentication solutions into customer-facing applications.
- Develop secure and high-quality production code, and review and debug code written by others.
What they are looking for
- Formal training or certification on software engineering concepts and 5+ years applied experience.
- Hands-on experience with PingFederate, Transmit Security, and ForgeRock platforms for authentication and authorization.
- Ability to lead and guide a small team to deliver innovative solutions.
- Understanding of application and data architecture disciplines.
- Experience with authentication and modern authentication practices and solutions (such as OAuth2/OpenID Connect, SAML, Facebook Login, Google Sign-In).
- Proficiency in one or more general-purpose programming languages; Java strongly preferred.
- Hands-on practical experience delivering system design, application development, testing, and operational stability.
- Proficiency in Java, Spring Boot, React.
- Knowledge of AWS, Kubernetes; advanced in one or more programming language(s).
- Cloud-native experience (AWS, Azure, or GCP).
- Experience designing and developing custom solution adapters and authentication logic on these platforms, including integration with external data sources and endpoints.
- Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
Nice to have
- Experience integrating anti-fraud and biometric authentication solutions.
- Familiarity with open standards and security protocols.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal abilities.
- Experience in the financial services industry is a plus.
Full posting text
Lead Software Engineer to drive technical leadership for Identity and Access Management modernization.
As a Lead Software Engineer in our Identity and Access Management team, you will drive a team of innovators and technologists to deliver next-generation authentication and authorization solutions. You will set strategic direction, solve complex challenges, and inspire your team to embrace leading-edge technologies and methodologies. Your leadership will help us deliver secure, high-quality outcomes that support our business and clients.
You'll collaborate with global teams and harness the talents of technologists from around the world. Your work will have a direct impact on our technology and the clients we serve
Job Responsibilities
Lead and mentor a team to deliver high-quality, innovative identity and access management solutions.
- Modernize authentication and authorization platforms across multiple channels and domains, leveraging **PingFederate, Transmit Security, and ForgeRock**.
- Evaluate and prototype internal and vendor solutions for user authentication.
- Integrate anti-fraud and biometric authentication solutions into customer-facing applications.
- Utilize APIs and SDKs for both niche solutions and open standards.
- Execute creative software solutions, design, development, and technical troubleshooting with the ability to think beyond routine or conventional approaches to build solutions or break down technical problems.
- Develop secure and high-quality production code, and review and debug code written by others.
- Drive team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.
- Apply knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
- Identify opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems.
- Build and maintain IAM web and UI components that invoke platform authentication flows.
- Design supporting data schemas, connection pooling, and failover for authentication and token storage.
Required Qualifications, Capabilities, and Skills
- Formal training or certification on software engineering concepts and 5+ years applied experience.
- Hands-on experience with **PingFederate, Transmit Security, and ForgeRock** platforms for authentication and authorization.
- Ability to lead and guide a small team to deliver innovative solutions.
- Understanding of application and data architecture disciplines.
- Experience with authentication and modern authentication practices and solutions (such as OAuth2/OpenID Connect, SAML, Facebook Login, Google Sign-In).
- Proficiency in one or more general-purpose programming languages; Java strongly preferred.
- Hands-on practical experience delivering system design, application development, testing, and operational stability.
- Proficiency in Java, Spring Boot, React.
- Knowledge of RESTful API design and development, including secure token-based authentication and authorization.
- Knowledge of AWS, Kubernetes; advanced in one or more programming language(s).
- Hands-on experience developing and supporting Java (Spring Boot) microservices in an enterprise environment.
- Cloud-native experience (AWS, Azure, or GCP).
- Experience designing and developing custom solution adapters and authentication logic on these platforms, including integration with external data sources and endpoints.
- Experience developing against vendor SDKs and Admin APIs to extend authentication platforms where native configuration is insufficient.
- Experience developing and consuming secure REST APIs and backend services supporting IAM platforms, including token validation and service-to-service integration.
- Proficiency in Java, including building applications that integrate with identity providers.
- Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.
- Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices.
Preferred Qualifications, Capabilities, and Skills
- Experience integrating anti-fraud and biometric authentication solutions.
- Familiarity with open standards and security protocols.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal abilities.
- Experience in the financial services industry is a plus.