Sr. Customer Identity Engineer (Remote)

Join Us!

Take the next step in your journey at Inspira Financial. Guided by our mission to enable better health and greater wealth, we help businesses and individuals thrive today, tomorrow, and into retirement by strengthening and simplifying the health and wealth journey.

Serving more than 7 million clients and representing over $62 billion in assets, Inspira partners with thousands of employers, plan sponsors, recordkeepers, TPAs, and other institutional partners to help the people they support plan, save, and invest for a brighter future. Through solutions including automatic rollover services, health savings accounts, emergency savings, and custody services, Inspira is focused on delivering better outcomes for all. Learn more at inspirafinancial.com.

Our values shape how we show up every day. We Lead with Heart by acting with compassion, empathy, and doing what's right; Cultivate Trust through integrity, transparency, and accountability; Aim Higher by never settling for what's expected and continually raising the standard; and Win Together by collaborating inclusively to achieve the best outcomes.

Our growth and culture haven't gone unnoticed -- we've been recognized on Crain's Fast 50 and Inc. 5000 for remarkable growth, and named to Built In's 2025 Best Places to Work and Gallagher's 2022 Best-In-Class Employer for our workplace culture and benefits.

Don't meet every single requirement? That's okay. We know growth comes from people who are willing to learn and challenge themselves, not just check every box. If you're energized and inspired by meaningful work, continuous development, and being part of a team that turns collective effort into real impact, we want to hear from you. We look forward to receiving your application.

Our office locations are designed to bring people together, foster collaboration, and build meaningful connections. While some roles are based at one of our office locations, remote status and role locations are subject to change, and relocation is not provided.

Job Summary & Responsibilities

Position Summary:

The Customer Identity Senior Engineer is responsible for building, maintaining, and operating the company’s customer identity platform. This role ensures secure, reliable, and scalable authentication and access services across multiple customer-facing products.

The Customer Identity Senior Engineer serves as the technical owner for customer identity lifecycle, authentication policies, and platform integrations. This position requires strong troubleshooting skills, scripting capability, and a service-oriented mindset to support business requirements, uptime, compliance, and product team enablement.

Duties & Responsibilities

• Implement, configure, and maintain enterprise customer identity and access management (CIAM) services on PingOne, including authentication policies and DaVinci orchestration flows.
• Support onboarding of new applications, APIs, and services into the customer identity ecosystem.
• Manage platform lifecycle activities including patching, maintenance, and capacity planning.
• Develop and maintain operational runbooks, standards, and procedures for identity services.
• Build and maintain automation for customer account lifecycle and access provisioning workflows.
• Partner with product and development teams to establish secure integration patterns using OAuth2, OIDC, and SAML.
• Monitor and optimize authentication performance and error handling through data-driven insights.
• Serve as the escalation point for complex authentication and customer access issues.
• Lead incident, problem, and change management activities related to CIAM systems.
• Devise and propose CIAM strategy through stakeholder information gathering, monitoring of metrics, analysis of emerging threats, and understanding of best practice trends.

Preferred Qualifications

Education & Experience:

• 5+ years of experience in Identity and Access Management, with at least 2 years focused on customer identity (CIAM) or authentication systems.
• Minimum 2 years of hands-on, production experience with PingOne and PingOne DaVinci.
• Bachelor’s degree in Computer Science, Software/Computing Engineering, Applied Mathematics or related field
• Ping Identity certifications (e.g., PingOne, DaVinci) strongly preferred; other technical certifications a plus

Skills & Abilities

• Strong understanding of modern identity protocols: OIDC, OAuth2, SAML, SCIM.
• Hands-on experience administering the PingOne cloud platform and building production authentication flows in PingOne DaVinci (orchestration flows, connectors, and API-driven integrations).
• Proven scripting and automation skills (PowerShell, Python, or comparable).
• Demonstrated troubleshooting ability across complex cloud and hybrid authentication environments.
• Excellent communication, documentation, and cross-functional collaboration skills.
• Experience with adaptive MFA, risk-based access, or passkey authentication.
• Familiarity with CI/CD pipelines, version control, and infrastructure-as-code (e.g., GitHub, Terraform).
• Exposure to service management frameworks (ITIL), compliance-driven operations (SOC 2, HIPAA, PCI DSS), and audit support.
• Understanding of cloud security and API integration principles.
• Familiarity with APIs, REST/JSON, and automation frameworks.

Other Requirements

• Infrequent travel less than 10%
• Ability to occasionally work overtime or after hours
• Prolonged periods of sitting at a desk and working on a computer
• Infrequent on-call responsibility to support overall team incident management

Pay Range

$100,200-$134,000 per year

Compensation & Benefits

The compensation for this position will vary depending on factors such as your location, skills and experience. The compensation package may also include incentive and bonus opportunities.

Inspira provides industry-leading benefits including, but not limited to: healthcare, 401K savings plan, company holidays, paid time off, parental leave and an employee assistance program.