OVERVIEW:DICK'S Inc. is looking for a Senior Customer Identity and Access Management (CIAM) Engineer. This role will perform as a function within our Cybersecurity and Digital Trust organization, with the primary strength of building, integrating, operating, and migrating scalable CIAM solutions. Our ultimate strategic goal is to combine and consolidate multiple customer identity platforms into a single, unified CIAM solution. This role will be the technical lead for this migration, ensuring a seamless, low-friction experience for our customers while maintaining a resilient, highly observable, and secure authentication ecosystem.
Core Responsibilities- CIAM Migration & Architecture: Lead the architectural design and execution of consolidating our disparate customer identity platforms into a single target solution.
- Product Co-Ownership & Business Strategy: Partner closely with product, marketing, and various business units to co-own the identity roadmap. Connect identity data to business intelligence to help drive sales, while balancing security measures against customer friction.
- Identity Operations: Own the day-to-day lifecycle operations of user accounts, including login flows, multi-factor authentication (MFA), password resets, account recovery, regular patching, system health checks, and feature rollouts.
- Integrations & Microservices: Develop and maintain advanced API connections and microservices architectures linking the CIAM platform to ancillary systems like customer loyalty programs, CRMs, and marketing tech stacks.
- Mobile & UI Support: Collaborate on or directly support the development of user-facing interfaces, ensuring the authentication experience on mobile applications is frictionless and intuitive.
- Observability & Resilience: Implement comprehensive logging, monitoring, and alerting configurations to ensure the identity platform is resilient against outages and highly visible to engineering teams. Security & Incident Response: Serve as a core responder for customer identity-related security incidents, identifying credential stuffing, bot mitigation, fraud trends, or system vulnerabilities, and mitigating threats in real time.
- Business Reviews: Conduct regular Quarterly Business Reviews (QBRs) and assessments to communicate platform health, migration velocity, and fraud metrics to stakeholders.
QUALIFICATIONS:Required Skills & Experience: - Proven experience successfully executing a full-scale CIAM platform migration from start to finish.
- Identity Technical Depth: Advanced expertise in session token management, authentication protocols (OAuth2, OIDC, SAML), and heavy API-driven architecture.
- Multi-Platform Knowledge: Hands-on experience working across multiple major CIAM solutions (e.g., Auth0, Okta, Ping Identity, ForgeRock, AWS Cognito, etc.). Developer Background: Strong coding background with a preferred focus on microservices and building integrations within a complex customer ecosystem - including CI/CD pipelines.
- Mobile UI/UX Experience: Experience developing or heavily influencing user interfaces for mobile applications, specifically around the login and onboarding journeys.
- Business Acumen & Communication: Experience navigating customer-facing challenges, translating technical risks into business impact, and managing communication strategies for end-users during major changes.
- Fraud & Friction Analytics: Ability to analyze fraud metrics and find the "sweet spot" where security protects the platform without hurting conversion rates or sales.
- Customer Support Optimization: Collaborate with customer care teams to understand and analyze customer support trends; optimizing solution delivery to reduce challenges encountered by support teams, including providing self-service resolution scenarios.
Preferred & Added Value Qualifications (Enterprise Consolidation Focus):- Zero-Downtime Migration Strategies: Experience utilizing Just-In-Time (JIT) user provisioning or migration techniques to move millions of active users without requiring forced, mass password resets.
- Data Privacy & Compliance Regulations: Solid understanding of global data privacy compliance legislation (such as GDPR, CCPA/CPRA) as it relates to merging customer profile databases and managing user consent. Participate in relevant legal engagements internally and externally as required.
- Modern Auth Standards: Familiarity with implementing passwordless authentication, FIDO2, and Passkeys to drive down mobile user friction and eliminate credential-based attacks.
- High-Volume Scalability: Experience managing identity platforms that handle massive, seasonal traffic spikes (e.g., flash sales, holiday traffic) without latency or degradation.
VIRTUAL REQUIREMENTS:At DICK'S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.
To ensure a smooth and secure experience, please note the following:
- Cameras must be on during all virtual interviews.
- AI tools are not permitted to be used by the candidateduring any part of the interview process.
- Offers are contingent upon a satisfactory background check which may include ID verification.
If you have any questions or need accommodations, we're here to help. Thanks for helping us keep the process fair and secure for everyone!
Targeted Pay Range: $83,000.00 - $138,200.00. This is part of a competitive total rewards package that could include other components such as: incentive, equity and benefits. Individual pay is determined by a number of factors including experience, location, internal pay equity, and other relevant business considerations. We review all teammate pay regularly to ensure competitive and equitable pay.
