Principal Security Engineer - Hybrid

Our Fortune 500 company is driving a digital transformation and looking for forward-thinking innovators to disrupt how our industry thinks about and uses technology. As one of the world's leading employee benefits providers, we help millions of people gain affordable access to benefits that help them protect their families, their finances and their futures.

Are you an asker of questions, a solver of problems, and a challenger of the status quo? Our mission is to provide a differentiated customer experience and exceed the expectations people have of technology at any company — not just insurers. 

We are seeking individuals to join our team of talented IT professionals who share never-ending passion and an unwavering focus on our customer experience. Team members comfortable working in an agile, fast-paced, and delivery-focused environment thrive in our environment where we value an entrepreneurial spirit and those who challenge the status-quo.

Unum is changing, and we’re excited about what’s next. Join us.

General Summary:

Unum is seeking a highly technical and hands-on Senior IAM/CIAM Solutions Engineer to lead and implement solutions for Identity Access Management (IAM) using SailPoint and Customer Identity Access Management (CIAM) using ForgeRock/Ping.

This role focuses on streamlining employee onboarding/offboarding processes through automation, supporting cloud migrations, and ensuring the stability, security, and efficiency of identity solutions across on-premise and cloud environments.

The successful candidate will collaborate closely with internal and external stakeholders to enhance identity operations and modernize processes, ensuring seamless integrations and alignment with enterprise security frameworks.

Location: 2 days on-site per week at either our Chattanooga, TN, Portland, ME, Columbia, SC or Atlanta, GA campus.

Principal Responsibilities:
 

Technical Implementation and Support:

• Provide hands-on leadership for IAM and CIAM solutions with SailPoint, ForgeRock, or Ping.
• Support and enhance application integrations for onboarding/offboarding automation to eliminate manual processes.
• Lead the migration of CIAM systems (ForgeRock) from on-premise to cloud, ensuring minimal disruption and improved scalability.
• Deploy and manage SailPoint implementations to improve identity governance and access control processes.
   

Automation and Optimization:

• Design and implement automation workflows to streamline processes, improving operational efficiency.
• Partner with application teams to enhance identity integrations and reduce manual interventions.
• Lead API integrations for on-premise-to-cloud transition.
   

System Stability and Vendor Management:

• Collaborate with third-party vendors to transition support services from current vendor and ensure operational stability.
• Oversee new deployments, monitor system performance, and resolve post-implementation issues.
• Provide Level II/III support for IAM and CIAM systems.
   

Security and Compliance:

• Develop and maintain security policies, procedures, and standards for IAM and CIAM systems.
• Conduct system upgrades, security assessments, and audits to ensure compliance with industry regulations (e.g., GDPR, HIPAA, NIST).
• Participate in on-call rotations to support deployments and resolve escalated issues.

Leadership and Collaboration:

• Act as a technical SME for SailPoint and ForgeRock.
• Mentor team members and provide hands-on guidance to improve skill gaps.
• Collaborate with stakeholders, including application teams and leadership, to ensure alignment with enterprise goals.
   

Required Qualifications:

• Education: Bachelor's degree in Computer Science, Information Security, or a related discipline.
   

Experience:

• 5+ years of technical experience in information security, IAM/CIAM systems, or IT consulting.
• Strong hands-on expertise in implementing and managing IAM solutions (e.g., SailPoint) and CIAM platforms (e.g., ForgeRock/Ping).
• Proven experience with on-premise-to-cloud migrations and application integrations.
• Proficiency in automation tools and scripting languages (e.g., Python, PowerShell).
   

Technical Skills:

• Expertise in SailPoint IdentityNow/IIQ.
• Deep knowledge of ForgeRock (OpenAM, OpenIDM) and/or Ping Identity.
• Familiarity with API integration and La