Principal IAM Engineer Consultant

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

• • Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
  • Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
  • Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

• 10+ years of progressive software engineering or identity engineering experience, including significant time operating at a Senior, Lead, Staff, or Principal Engineer level
• Deep hands-on expertise designing and implementing Customer Identity and Access Management (CIAM) solutions supporting customer-facing applications at enterprise scale
• Expert knowledge of modern identity platforms including Ping Identity (PingFederate/PingOne), ForgeRock, Okta Customer Identity/Auth0, or Microsoft Entra External ID
• Experience producing engineering-level design documentation including:
  • OAuth 2.0, OpenID Connect (OIDC), and SAML federation
  • Authentication and authorization flows
  • Passwordless and MFA architectures
  • Session and token management
  • API security and integration patterns
  • Sequence diagrams, data flows, and implementation designs
• Proven ability to influence architecture and engineering decisions across multiple delivery teams without direct management authority
• Experience identifying technical debt, architecture drift, security gaps, and implementation risks while driving practical engineering improvements
• Strong understanding of secure software engineering, Zero Trust principles, and cloud-native identity architectures
• Experience supporting high-volume customer-facing identity platforms within banking, credit unions, insurance, fintech, or similarly regulated industries
• Excellent communication skills with the ability to build consensus across engineers, architects, product leaders, and executive stakeholders while navigating complex organizational environments

• Experience leading or supporting large-scale customer identity platform migrations, consolidations, or modernization initiatives
• Experience supporting mergers, acquisitions, or identity platform integrations across multiple organizations
• Experience with Azure API Management (APIM), Cosmos DB, F5 Distributed Cloud/Shape, or similar supporting technologies
• Experience integrating CIAM solutions with customer-facing mobile applications and digital banking platforms
• Familiarity with fraud prevention and identity risk platforms such as Outseer
• Experience creating reusable architecture patterns, engineering standards, and technical playbooks
• Knowledge of Infrastructure as Code, cloud-native architectures, and DevSecOps delivery practices

 WHAT WE OFFER:

• The annual salary range for this role is $160,000-$220,000. 
• Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

This role is remote

Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.

Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to talent@kallesgroup.com.

Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.