Cybersecurity Staff Engineer - IAM Consultant

RESPONSIBILITIES:
Kforce's client in McKinney, TX is seeking a senior-level Cybersecurity Staff Engineer specializing in Identity and Access Management (IAM) with a strong focus on Customer Identity and Access Management (CIAM). This is a hybrid role requiring onsite work in the Allen/McKinney area, TX, 2-3 days per week. Local or DFW-area candidates are strongly preferred.

Summary:
In this role, you will support both customer-facing identity solutions and enterprise IAM initiatives, helping design, implement, and support secure authentication and access services. You will work closely with application teams, security, and infrastructure partners to deliver scalable and secure identity solutions. This role also involves hands-on work with SailPoint Identity Security Cloud, Active Directory, and Microsoft Entra ID (Azure AD) to support identity lifecycle management, access governance, role-based access, and application onboarding.

Key responsibilities:
* Designing and supporting customer registration and login experiences, multi-factor authentication, passwordless access, account recovery, and profile management
* Leading CIAM integrations across web, mobile, SaaS, and partner applications
* Analyzing identity data, roles, groups, entitlements, and access models; support SSO and federation integrations; Contribute to IAM documentation, architecture diagrams, runbooks, and audit evidence
* Mentoring junior engineers, managing multiple IAM initiatives, and providing regular status updates to leadership

REQUIREMENTS:
* 8+ years of experience in Identity and Access Management, cybersecurity engineering, or a related field
* Strong hands-on experience with Customer Identity and Access Management (CIAM) and customer-facing identity use cases
* Strong hands-on experience with SailPoint Identity Security Cloud (ISC), including identity profiles, access profiles, roles, entitlements, certifications, workflows, provisioning, and lifecycle management
* Strong experience with Active Directory, including users, groups, OUs, service accounts, and group-based access
* Strong experience with Microsoft Entra ID / Azure AD, including enterprise applications, app registrations, conditional access, MFA, groups, and identity governance
* Experience designing and supporting customer registration, login, MFA, account recovery, and profile management flows
* Experience supporting B2B, B2C, partner, vendor, and external-user identity models
* Experience with SSO, federation, and provisioning technologies, including SAML, OAuth 2.0, OIDC, LDAP, and SCIM
* Experience with identity governance, access reviews, RBAC, and entitlement management
* Ability to troubleshoot authentication, authorization, federation, provisioning, MFA, and access issues
* Strong communication skills and ability to work independently in a hybrid environment

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.