**_This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 10-12 days a month._** **_Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future._** **What You’ll Do:** + Architect and optimize customer identity journeys using Ping DaVinci, PingOne, and API-first frameworks. + Lead mobile-first authentication initiatives with features like Passkeys, biometric enrollment, and push MFA. + Integrate fraud-aware signals from tools like ThreatMetrix, BioCatch, and Ping Risk into login and registration flows. + Collaborate with mobile engineering teams to embed IAM SDKs and ensure secure app posture. + Design linkless authentication and session continuity strategies for omnichannel experiences. + Provide expertise in identity proofing, progressive profiling, and delegated access. + Maintain and evolve CIAM documentation, APIs, and security best practices. + Drive large-scale IAM transformation projects aligned with business growth and compliance. **What You Bring:** + 6–10+ years in Identity & Access Management, with 3+ years focused on CIAM. + Proven experience with Ping Identity, DaVinci, and customer IAM orchestration tools. + Deep understanding of OAuth2.0, OpenID Connect, SAML, and token lifecycle management. + Hands-on experience with mobile authentication, secure SDKs, and PKI. + Familiarity with fraud detection techniques like device fingerprinting, IP velocity checks, and geolocation anomalies. + Ability to guide developers and application owners in secure IAM integrations. **Why Join Us?** + Be part of a forward-thinking team driving secure digital transformation. + Work with cutting-edge tools and technologies in the CIAM space. + Make a real impact on how millions of customers interact with Raymond James.