Principal Engineer, Workforce, Customer & Agentic Identity
$199,000–$274,000 year
RemoteIllinois, United States
Job Summary
Define and drive the technical strategy and architecture for workforce, customer, machine, and agentic identity platforms across the enterprise. Partner directly with engineers, architects, product teams, and security leaders to design, implement, and modernize identity solutions while championing secure, frictionless customer and employee experiences. Lead the evaluation, design, and adoption of identity platforms including Ping Identity and SailPoint, and establish engineering standards that advance the company's Zero Trust strategy. Provide technical leadership for authentication, authorization, federation, and privileged access management capabilities, influencing enterprise adoption of identity modernization initiatives. This hands-on role requires travel within the local area or to offices on a regular basis.
Required Qualifications
- 12+ years of experience designing and implementing enterprise Identity and Access Management (IAM) solutions
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical field
- Working knowledge of Ping Identity, SailPoint, or similar identity and access management platforms
- Strong knowledge of customer identity, workforce identity, federation, SSO, MFA, privileged access management, identity governance, and access certification
- Experience designing and implementing Zero Trust identity architectures, including conditional access, risk-based authentication, fine-grained authorization, and least-privilege access controls
- Experience supporting machine identities, workload identities, service accounts, certificates, secrets management, and cloud-native identity models
- Familiarity with emerging AI and agentic identity concepts, governance models, and authorization frameworks
- Proven ability to influence senior leaders, drive enterprise adoption, and communicate complex technical strategies across diverse stakeholder groups
- Must be able to travel within your local area or to one of our offices on a regular basis
- Must be able to submit to a background investigation
- Must have a dedicated, private workspace free from distractions, along with appropriate desk and seating when working from home
- Must have reliable internet with minimum speeds of 50 MB download and 5 MB upload
Desired Qualifications
- Relevant IAM or security certifications such as CISSP, CCSP, SailPoint, Ping Identity, Microsoft Security, or equivalent
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.