Sr. Security Engineer (Customer Identity)

Join Us!
Take the next step in your journey at Inspira Financial. You will help businesses and individuals thrive today, tomorrow, and into retirement. Become part of a company that is people centric and client obsessed in every interaction; a community of forward-thinking individuals focused on driving results to deliver our mission with an unwavering commitment to integrity. Join us as we strengthen and simplify the health and wealth journey -- relentlessly pursuing better outcomes for all. We believe in finding the best talent! While some roles are based at one of our office locations, remote roles can sit in any of the following states: AL, AZ, FL, GA, IA, IL, IN, MI, MN, MO, NC, NE, PA, SC, TN, TX, UT, VA and WV. Remote status and role locations are subject to change. Relocation is not provided.
Employees within a 90-minute radius of our Oak Brook, IL headquarters are required to adhere to the company in-office work guidelines of 4 days per month minimum from 10 am to 2 pm (1 of the 4 days must be a Monday or Friday).
This requirement does not apply to support specialist positions.
Don't meet every single requirement? Here at Inspira Financial, we believe there is no "perfect" candidate and want to encourage applying even if all the requirements listed aren't met. Our goal is to build an authentic workplace by valuing diversity in our candidates. We work to ensure that our team reflects the diversity of the businesses and clients we serve. We are always looking to expand our growing team with dynamic and enthusiastic individuals. If you enjoy a collaborative, fun environment that champions career development, Inspira Financial is the place for you! We look forward to receiving your application! Check out this Inspira Financial video to learn more about our company!
Inspira Financial provides health, wealth, retirement, and benefits solutions that strengthen and simplify the health and wealth journey. With more than 7 million clients, representing over $62 billion in assets, Inspira works with thousands of employers, plan sponsors, recordkeepers, TPAs, and other institutional partners -- helping the people they care about plan, save, and invest for a brighter future. Inspira relentlessly pursues better outcomes for all with our automatic rollover services, health savings accounts, emergency savings funds, custody services, and more. Learn more at inspirafinancial.com .
We have been recognized for our remarkable growth on lists such as Crain's Fast 50 and Inc. 5000, and for our outstanding workplace culture and benefits with Built In's 2025 Best Places to Work and Gallagher's 2022 Best-In-Class Employer awards.
Job Summary & Responsibilities
The Customer Identity Senior Engineer is responsible for building, maintaining , and operating the company's customer identity platform. This role ensures secure, reliability , and scalable authentication and access services across multiple customer-facing products.
The Customer Identity Senior Engineer serves as the technical owner for customer identity lifecycle, authentication policies, and platform integrations. This position requires strong troubleshooting skills, scripting capability, and a service-oriented mindset to support business requirements, uptime, compliance, and product team enablement.
Duties & Responsibilities:

• Implement, configure, and maintain enterprise customer identity and access management (CIAM) services.

• Support onboarding of new applications, APIs, and services into the customer identity ecosystem.

• Manage platform lifecycle activities including patching, maintenance, and capacity planning.

• Develop and maintain operational runbooks, standards, and procedures for identity services.

• Build and maintain automation for customer account lifecycle and access provisioning workflows.

• Partner with product and development teams to establish secure integration patterns using OAuth2, OIDC, and SAML.

• Monitor and optimize authentication performance and error handling through data-driven insights.

• Serve as the escalation point for complex authentication and customer access issues.

• Lead incident, problem, and change management activities related to CIAM systems.

• Devise and propose CIAM strategy through stakeholder information gathering , monitoring of metrics , analysis of emerging threats, and understanding of best practice trends .

Preferred Qualifications
Education & Experience:

• 5+ years of experience in Identity and Access Management, with at least 2 years focused on customer identity (CIAM) or authentication systems.

• Bachelor's degree in computer science , Software/Computing Engineering, Applied Mathematics or related field

• Technical Certifications a plus

Skills & Abilities:

• Strong understanding of modern identity protocols: OIDC, OAuth2, SAML, SCIM.

• Hands-on experience with PingOne identity platforms .

• Proven scripting and automation skills (PowerShell, Python, or comparable).

• Demonstrated troubleshooting ability across complex cloud and hybrid authentication environments.

• Excellent communication, documentation, and cross-functional collaboration skills.

• Experience with adaptive MFA, risk-based access, or passkey authentication.

• Familiarity with CI/CD pipelines, version control, and infrastructure-as-code (e.g., GitHub, Terraform).

• Exposure to service management frameworks (ITIL) and compliance-driven operations (SOC 2, HIPAA, PCI DSS).

• Understanding of cloud security and API integration principles.

• Experience with compliance frameworks (SOC 2, HIPAA, PCI) and audit support.

• Experience with version control systems (Git) and CI/CD pipelines for automation code.

• Proven troubleshooting and analytical skills, with a methodical approach to problem solving.

• Familiarity with APIs, REST/JSON, and automation frameworks.

• Ability to communicate complex technical issues clearly to both technical and non-technical audiences.

Compensation & Benefits
$106,000-$134,000 per year