Engineer - Customer Identity and Access Management (CIAM)

Engineer - Customer Identity and Access Management (CIAM) 

The Big Picture 

Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 56th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.   

Sysco employs over 75,000 associates, has 337 smart distribution facilities worldwide and over 14,000 IoT-enabled trucks serving 730,000 customer locations. For fiscal year 2025 that ended June 29, 2025, the company generated sales of more than $81.4 billion.   

Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations. Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer. 

The Opportunity 

​​​Sysco is hiring a highly skilled Engineer - Customer Identity and Access Management (CIAM) with a strong background in Customer Identity & Access Management (CIAM) solutions, specializing in Okta SSO and MFA. The ideal candidate will bring a minimum of 2 to 4+ years of experience in IAM technologies (Okta, Azure Entra, Identity Governance tools) and will play a critical role in designing, implementing, and supporting IAM solutions. This role requires hands-on expertise, cross-functional collaboration, and strong communication skills to drive secure and seamless identity solutions across the organization.​ This is an ​​individual contributor​ role. 

​​This is a hybrid remote and office-based role in Sri Lanka, aligning with the local job requirement guidelines (Primary shift: [7:30 PM-3:30 AM SLST, 9:00 AM-5:00 PM CDT] with flexibility). Most work is performed Monday through Friday virtually using collaboration tools and video conferencing. ​Our team offers on-call support. You’ll be part of a high-performing, security-driven team that values innovation, delivery excellence, and continuous learning.  ​ ​ ​ 

Responsibilities: 

• ​​Configuring and managing Okta SSO, MFA, lifecycle management, and integration with eCommerce applications 

• ​​Designing, implementing, and maintaining CIAM solutions, leveraging Okta for global applications 

• ​​Troubleshooting and resolving complex integration issues, ensuring service reliability and minimal disruption to business operations​  

• ​​Developing and maintaining technical and project documentation, including architecture diagrams, project plans, status reports, and operational runbooks​  

• ​​Serving as the technical SME for integration efforts, translating business and security requirements into effective identity solutions​ 

• ​​Providing 24X7 On-Call support for CIAM services​ 

• ​​Managing integration projects for end-to-end, including planning, scoping, resourcing, risk mitigation, stakeholder communication, and on-time delivery  

• ​​​Developing custom scripts, customizations and APIs to support business needs​​  

Requirements: 

• ​​A Bachelor’s Degree in Computer Science, Information Systems, Engineering, or a related field; or equivalent work experience 

• ​​An advanced degree or IAM-related certifications 

• ​​2 to 3+ years of experience in IAM technologies with strong hands-on expertise in Okta 

• ​Experience in customizations, scripts development, and API development 

• ​A proven track record leading IAM integrations involving SaaS, cloud, and on-prem platforms 

• ​3+ years of experience with IAM platforms such as SailPoint, ForgeRock, or Azure AD 

• ​​3+ years of experience managing or coordinating IT/security projects (Agile, Waterfall, or hybrid environments) 

• ​​Okta Certified Professional or Developer​ 

• ​​Strong hands-on experience with Okta SSO, MFA, adaptive authentication policies, risk-based authentication, and advanced integrations 

• ​Proven ability to integrate diverse business applications into CIAM platform 

• ​Strong experience with API-based integration and REST API workflows for identity services 

• ​Ability to develop and maintain Okta APIs, custom flows, and templates 

• ​Experience in implementing risk-based, adaptive, and passwordless authentication solutions 

• ​Advanced troubleshooting of issues and strong analytical skills 

• ​Working knowledge of other IAM tools​ 

Benefits: 

• US dollar-linked compensation 

• Performance-based annual bonus 

• Performance rewards and recognition 

• Agile Benefits - special allowances for Health, Wellness & Academic purposes 

• Entertainment allowance 

• Team engagement allowance 

• Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws 

• Overseas travel opportunities and exposure to client environments 

• Hybrid work arrangement 

Sysco LABS is an Equal Opportunity Employer.