Sr. Customer Identity Engineer (Remote)

Join Us!
Take the next step in your journey at Inspira Financial. Guided by our mission to enable better health and greater wealth, we help businesses and individuals thrive today, tomorrow, and into retirement by strengthening and simplifying the health and wealth journey. Serving more than 7 million clients and representing over $62 billion in assets, Inspira partners with thousands of employers, plan sponsors, recordkeepers, TPAs, and other institutional partners to help the people they support plan, save, and invest for a brighter future. Through solutions including automatic rollover services, health savings accounts, emergency savings, and custody services, Inspira is focused on delivering better outcomes for all. Learn more at inspirafinancial.com .
Our values shape how we show up every day. We Lead with Heart by acting with compassion, empathy, and doing what's right; Cultivate Trust through integrity, transparency, and accountability; Aim Higher by never settling for what's expected and continually raising the standard; and Win Together by collaborating inclusively to achieve the best outcomes.
Our growth and culture haven't gone unnoticed; we've been recognized on Crain's Fast 50 and Inc. 5000 for remarkable growth, and named to Built In's 2025 Best Places to Work and Gallagher's 2022 Best-In-Class Employer for our workplace culture and benefits.
Don't meet every single requirement? That's okay. We know growth comes from people who are willing to learn and challenge themselves, not just check every box. If you're energized and inspired by meaningful work, continuous development, and being part of a team that turns collective effort into real impact, we want to hear from you. We look forward to receiving your application.
Our office locations are designed to bring people together, foster collaboration, and build meaningful connections. While some roles are aligned to a specific office location, work arrangements and role locations may change over time to support business and team needs. Relocation assistance is not provided, whether for the initial move or for future changes in work location or role.
Remote Eligibility: At the time of hire, candidates for remote positions must reside in one of the following states: AL, AZ, CT, DE, FL, GA, IA, IL, IN, KY, MA, MI, MN, MO, NC, NE, NJ, NV, OH, OK, PA, RI, SC, TN, TX, UT, VA, VT, WA, WI, WV.
Job Summary & Responsibilities
Position Summary:
The Customer Identity Senior Engineer is responsible for building, maintaining , and operating the company's customer identity platform. This role ensures secure, reliable, and scalable authentication and access services across multiple customer-facing products.
The Customer Identity Senior Engineer serves as the technical owner for customer identity lifecycle, authentication policies, and platform integrations. This position requires strong troubleshooting skills, scripting capability, and a service-oriented mindset to support business requirements, uptime, compliance, and product team enablement.
Duties & Responsibilities:

• Implement, configure, and maintain enterprise customer identity and access management (CIAM) services on PingOne , including authentication policies and DaVinci orchestration flows .

• Support onboarding of new applications, APIs, and services into the customer identity ecosystem.

• Manage platform lifecycle activities including patching, maintenance, and capacity planning.

• Develop and maintain operational runbooks, standards, and procedures for identity services.

• Build and maintain automation for customer account lifecycle and access provisioning workflows.

• Partner with product and development teams to establish secure integration patterns using OAuth2, OIDC, and SAML.

• Monitor and optimize authentication performance and error handling through data-driven insights.

• Serve as the escalation point for complex authentication and customer access issues.

• Lead incident, problem, and change management activities related to CIAM systems.

• Devise and propose CIAM strategy through stakeholder information gathering , monitoring of metrics , analysis of emerging threats, and understanding of best practice trends .

Preferred Qualifications
Education & Experience:

• 5+ years of experience in Identity and Access Management, with at least 2 years focused on customer identity (CIAM) or authentication systems.

• Minimum 2 years of hands-on, production experience with PingOne and PingOne DaVinci.

• Bachelor's degree in Computer Science , Software/Computing Engineering , Applied Mathematics or related field

• Ping Identity certifications (e.g., PingOne , DaVinci) strongly preferred; other technical certifications a plus

Skills & Abilities:

• Strong understanding of modern identity protocols: OIDC, OAuth2, SAML, SCIM.

• H ands-on experience administering the PingOne cloud platform and building production authentication flows in PingOne DaVinci (orchestration flows, connectors, and API-driven integrations).

• Proven scripting and automation skills (PowerShell, Python, or comparable).

• Demonstrated troubleshooting ability across complex cloud and hybrid authentication environments.

• Excellent communication, documentation, and cross-functional collaboration skills.

• Experience with adaptive MFA, risk-based access, or passkey authentication.

• Familiarity with CI/CD pipelines, version control, and infrastructure-as-code (e.g., GitHub, Terraform).

• Exposure to service management frameworks (ITIL), compliance-driven operations (SOC 2, HIPAA, PCI DSS), and audit support.

• Understanding of cloud security and API integration principles.

• Familiarity with APIs, REST/JSON, and automation frameworks.

Other Requirements :

• Infrequent travel less than 10%

• Ability to occasionally work overtime or after hours

• Prolonged periods of sitting at a desk and working on a computer

• Infrequent on-call responsibility to support overall team incident management

Compensation & Benefits
$100,200-$134,000 per year