Principal Engineer (Security - CIAM)

Position Purpose

We are seeking a  Principal Engineer  to join the Information Security team as a vital contributor responsible for developing and managing all identity and access management (IAM) controls at Genuine Parts Company (GPC). The IAM program focuses on Customer Identity and Access Management (CIAM) infrastructure systems and applications, as well as Cloud Infrastructure as a Service (IaaS) and Software as a Service (SaaS) applications.

The  Principal Engineer, CIAM  will ensure the effectiveness of IAM controls and lead initiatives to define and implement control improvements that mitigate risks and enhance efficiency. This role involves collaboration with business and technology stakeholders to establish high-performing project teams and oversee projects from initiation to production deployment.

As a leader in engineering, this role will drive IAM modernization, transformation, and execution for GPC’s unified IAM platforms. The ideal candidate must be a technologist and engineer at heart, comfortable with implementing new technologies and actively engaging in strategy execution. They should demonstrate a deep understanding of modern technology stacks and agile delivery models, a strong commitment to customer experience, and a proven track record in modernizing technologies.

Close collaboration and alignment with business teams, application development teams, and security teams are essential. Therefore, exceptional skills in building and maintaining strong working relationships, organizational savvy, and high-level communication and presentation abilities are critical. Additionally, the ability to attract, retain, and develop engineering talent will be vital for success in this role.

Responsibilities

Leverage advanced technical expertise to design, implement, and support complex IAM solutions for the organization and its customers.

Collaborate with business clients to understand their needs, create IAM solutions to address those needs, and support the deployment and operation of these solutions.

Develop and implement complex IAM solutions that meet the organization's business and security requirements.

Introduce the team’s strategies into the foundational framework of other service and application teams.

Provide guidance on the impact of proposed or necessary changes—particularly in software, performance, maintenance, and cost—and make recommendations to management along with impact assessments.

Translate technical security specifications into business requirements.

Serve as the highest level of technical escalation for design, implementation, and operational support.

Manage the design and documentation of the IAM platform, executing identity and access strategies within a zero-trust architecture.

Determine requirements for identity-related business system implementation projects.

Analyze and resolve IAM architectural issues affecting various platforms, applications, and systems, following standardized processes.

Identify deficiencies in technology solutions and collaborate with technical teams to address them.

Lead the design and documentation of the IAM platform architecture and roadmap, defining and delivering identity and access strategies as part of a zero-trust architecture.

Oversee the design, definition, and implementation of security best practices and cybersecurity and digital risk standards and policies to ensure they are understood and followed by development teams.

Participate in capacity planning, performance testing, and disaster recovery discussions to ensure a performant, scalable, highly available, and resilient IAM platform.

Requirements

Bachelor’s or Master’s degree in a relevant field or an equivalent combination of education and experience.

10+ years of progressive work experience in IAM delivery, with at least 5+ years of hands-on experience in IAM access management.

Proven expertise in multiple disciplines, technologies, or processes related to IAM.

Strong background in IAM products and solutions, including ForgeRock IGA, PingOne Advanced Services, CIAM IGA Tools, Directory Services, Access Management solutions, Cloud IAM services, and Microsoft Azure Active Directory.

Proficiency with infrastructure techniques such as Cloud, Lightweight Directory Access Protocol (LDAP), Security Assertion Markup Language (SAML), and Multi-Factor Authentication (MFA) / Single Sign-On (SSO).

Expertise in IAM-related protocols such as Entra ID, Azure AD, Active Directory, LDAP, Ping LDAP, SAML, WS-Federation, OpenID, OAuth, SCIM, SOAP, REST, JSON, and XML / HTML.

Ability to develop and execute strategies for managing customer identities, including user registration, authentication, authorization, and user profile management.

Experience in developing and ensuring compliance with policies, standards, and processes.

Strong analytical and problem-solving skills.

Excellent oral and written communication skills.

Comfortable with ambiguity and willing to step outside of their comfort zone to acquire new skills.

Technically creative and open-minded.

Thorough understanding of industry best practices, emerging technologies, and current threats to improve defenses for information systems and resources.

Experience with Agile application development, support, and deployment.

Nice to have

Location

Krakow / Hybrid