Lead Infrastructure Security Engineer, Customer Identity & Access Management

Prudential Financial

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Newark, NJ
Salary
$133,600–$220,400 / yr
Employment
Full-time
Posted
9 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $186k
This role $177k
$123k $236k
below market most similar roles pay here above market

This role pays less than 55% of similar roles. Most pay $156,650–$216,253 — the blue band above. At the midpoint, this role pays about $177k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About Prudential Financial

Prudential Financial is a global financial services leader and premier active global investment manager.

Prudential Financial currently has 38 open roles on FindRole.

Listed pay typically runs $121,850–$188,900 across 20 roles with salary data.

Most-posted roles

View all roles at Prudential Financial

At a glance

TL;DR · Lead Infrastructure Security Engineer, Customer Identity & Access Management

Role Posting Log in to save

The Lead, Infrastructure Security Engineer - Customer Identity & Access Management joins the Global Technology Security Services team to build next-generation identity platforms. You will lead the design, development, and automation of security capabilities across the global CIAM ecosystem, focusing on PingOne Advanced Identity Cloud and PingOne Protect. Daily responsibilities include engineering authentication journeys, custom JavaScript decision logic, and fraud mitigation patterns. You will integrate device intelligence, behavioral analytics, and OIDC claims while managing mobile and web integrations. Required expertise includes PingOne AIC, PingOne Protect, and production coding in Java, JavaScript/TypeScript, Python, Spring, or Node.js. You must also demonstrate proficiency with React, PowerShell, REST APIs, Splunk, and Dynatrace. This role solves complex technical problems regarding secure customer registration, account recovery, and multi-factor authentication across diverse global channels.

Skills

PingOne Advanced Identity Cloud PingOne Protect CIAM OIDC JWT Java JavaScript TypeScript Python Spring Node.js React React Native Android iOS Flutter REST API Splunk Dynatrace AWS EKS Route 53 ALB CI/CD Postman

What you'll do

  • Engineer advanced authentication, registration, and account recovery journeys using PingOne Advanced Identity Cloud.
  • Develop and maintain custom JavaScript decision logic, validation rules, and reusable CIAM components.
  • Customize PingOne AIC Hosted Pages for branding, localization, and accessibility compliance.
  • Design and implement PingOne Protect capabilities to manage risk policies and fraud intelligence.
  • Develop proactive fraud mitigation patterns to dynamically allow, challenge, throttle, or block transactions.
  • Integrate and troubleshoot identity SDKs across JavaScript, React Native, Android, iOS, and Flutter platforms.
  • Design and implement coarse- and fine-grained authorization using least-privilege scopes and JWT claims.
  • Write maintainable modules, API clients, and pipeline automation in languages like Java, TypeScript, or Python.

What we're looking for

  • Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or equivalent professional experience.
  • Typically 5.5 or more years of experience in IAM, security engineering, software engineering, platform engineering, or cloud experience.
  • Advanced hands-on expertise with PingOne Advanced Identity Cloud SAAS, including journey design, custom nodes, and OIDC claims logic.
  • Hands-on experience integrating PingOne Protect for fraud detection, adaptive authentication, and behavioral analytics.
  • Experience integrating and troubleshooting Ping journey and device-profiling SDKs in JavaScript, React Native, Android, iOS, and Flutter.
  • Strong production coding capability in at least two of Java, JavaScript/TypeScript, Python, Spring, Node.js, React, PowerShell, or shell.
  • Advanced REST API engineering skills including resource design, HTTP semantics, JSON schemas, and automated contract validation.
  • Strong Splunk and Dynatrace capability for monitoring, alert design, and root-cause analysis.
  • Preferred evidence of a production implementation personally designed and delivered involving PingOne AIC, AWS EKS, or OAuth clients (preferred).

Related searches

More Infrastructure Security Engineer Lead jobs Infrastructure Security Engineer Lead jobs in Newark All jobs at Prudential Financial

More like this

Similar roles

Lead Infrastructure Security Engineer, CASB and DSPM

Prudential Financial

Newark, NJ 20 days ago $133,600–$220,400
CASB DSPM Microsoft 365 Z Scaler Azure AWS Entra ID Splunk Microsoft Defender for Cloud Apps SIEM SOAR PowerShell Python DLP IAM Zero Trust API Integration GDPR HIPAA CCPA
7+ yrs exp
Save

Identity and Access Management Engineer

State Street

Clifton, NJ +1 48 days ago $125,000–$226,250
IAM CIAM Zero Trust Active Directory AD SSO IDP PKI HSM MFA Privileged Access Management RBAC ABAC Secret Vault Security Protocols DR Resilience
Save