高级网络安全工程师
Senior Cybersecurity Engineer
在DICK’S Sporting Goods，我们相信体育如何积极地改变人生。在我们的团队中，每个人都在通过亲自为所有运动员提供装备以实现他们的梦想而发挥关键作用。我们致力于打造一个包容且多元化的员工队伍，反映我们所服务的社区。
如果你准备好作为世界上最好的体育团队的一员做出改变，请立即申请加入我们的团队！
简介：
DICK’S Inc. 正在寻找一名高级客户身份与访问管理（CIAM）工程师。该职位将作为我们网络安全与数字信任组织中的一个职能角色，主要负责构建、集成、运营和迁移可扩展的CIAM解决方案。我们的最终战略目标是将多个客户身份平台整合为一个统一的CIAM解决方案。该职位将担任此次迁移的技术负责人，确保客户获得无缝、低摩擦的体验，同时保持身份验证生态系统的弹性、高度可观测性和安全性。
核心职责
- CIAM迁移与架构：领导将分散的客户身份平台整合为单一目标解决方案的架构设计与执行。
- 产品共担与业务策略：与产品、市场及各类业务部门紧密合作，共同拥有身份路线图。将身份数据与业务智能连接，以推动销售，同时在安全措施与客户摩擦之间取得平衡。
- 身份运维：负责用户账户的日常生命周期操作，包括登录流程、多因素认证（MFA）、密码重置、账户恢复、定期补丁、系统健康检查和功能发布。
- 集成与微服务：开发并维护先进的API连接和微服务架构，将CIAM平台与客户忠诚计划、CRM和营销技术栈等辅助系统连接起来。
- 移动端与UI支持：参与或直接支持用户界面的开发，确保移动应用程序上的认证体验流畅且直观。
- 可观测性与弹性：实施全面的日志记录、监控和警报配置，确保身份平台在故障时具有弹性，并对工程团队高度可见。安全与事件响应：作为客户身份相关安全事件的核心响应者。
查看英文原文
At DICK’S Sporting Goods, we believe in how positively sports can change lives. On our team, everyone plays a critical role in creating confidence and excitement by personally equipping all athletes to achieve their dreams. We are committed to creating an inclusive and diverse workforce, reflecting the communities we serve.
If you are ready to make a difference as part of the world’s greatest sports team, apply to join our team today!
OVERVIEW:
DICKʼS Inc. is looking for a Senior Customer Identity and Access Management (CIAM) Engineer. This role will perform as a function within our Cybersecurity and Digital Trust organization, with the primary strength of building, integrating, operating, and migrating scalable CIAM solutions. Our ultimate strategic goal is to combine and consolidate multiple customer identity platforms into a single, unified CIAM solution. This role will be the technical lead for this migration, ensuring a seamless, low-friction experience for our customers while maintaining a resilient, highly observable, and secure authentication ecosystem.
Core Responsibilities
- CIAM Migration & Architecture: Lead the architectural design and execution of consolidating our disparate customer identity platforms into a single target solution.
- Product Co-Ownership & Business Strategy: Partner closely with product, marketing, and various business units to co-own the identity roadmap. Connect identity data to business intelligence to help drive sales, while balancing security measures against customer friction.
- Identity Operations: Own the day-to-day lifecycle operations of user accounts, including login flows, multi-factor authentication (MFA), password resets, account recovery, regular patching, system health checks, and feature rollouts.
- Integrations & Microservices: Develop and maintain advanced API connections and microservices architectures linking the CIAM platform to ancillary systems like customer loyalty programs, CRMs, and marketing tech stacks.
- Mobile & UI Support: Collaborate on or directly support the development of user-facing interfaces, ensuring the authentication experience on mobile applications is frictionless and intuitive.
- Observability & Resilience: Implement comprehensive logging, monitoring, and alerting configurations to ensure the identity platform is resilient against outages and highly visible to engineering teams. Security & Incident Response: Serve as a core responder for customer identity-related security incidents, identifying credential stuffing, bot mitigation, fraud trends, or system vulnerabilities, and mitigating threats in real time.
- Business Reviews: Conduct regular Quarterly Business Reviews (QBRs) and assessments to communicate platform health, migration velocity, and fraud metrics to stakeholders.
QUALIFICATIONS:
Required Skills & Experience:
- Proven experience successfully executing a full-scale CIAM platform migration from start to finish.
- Identity Technical Depth: Advanced expertise in session token management, authentication protocols (OAuth2, OIDC, SAML), and heavy API-driven architecture.
- Multi-Platform Knowledge: Hands-on experience working across multiple major CIAM solutions (e.g., Auth0, Okta, Ping Identity, ForgeRock, AWS Cognito, etc.). Developer Background: Strong coding background with a preferred focus on microservices and building integrations within a complex customer ecosystem - including CI/CD pipelines.
- Mobile UI/UX Experience: Experience developing or heavily influencing user interfaces for mobile applications, specifically around the login and onboarding journeys.
- Business Acumen & Communication: Experience navigating customer-facing challenges, translating technical risks into business impact, and managing communication strategies for end-users during major changes.
- Fraud & Friction Analytics: Ability to analyze fraud metrics and find the "sweet spot" where security protects the platform without hurting conversion rates or sales.
- Customer Support Optimization: Collaborate with customer care teams to understand and analyze customer support trends; optimizing solution delivery to reduce challenges encountered by support teams, including providing self-service resolution scenarios.
Preferred & Added Value Qualifications (Enterprise Consolidation Focus):
- Zero-Downtime Migration Strategies: Experience utilizing Just-In-Time (JIT) user provisioning or migration techniques to move millions of active users without requiring forced, mass password resets.
- Data Privacy & Compliance Regulations: Solid understanding of global data privacy compliance legislation (such as GDPR, CCPA/CPRA) as it relates to merging customer profile databases and managing user consent. Participate in relevant legal engagements internally and externally as required.
- Modern Auth Standards: Familiarity with implementing passwordless authentication, FIDO2, and Passkeys to drive down mobile user friction and eliminate credential-based attacks.
- High-Volume Scalability: Experience managing identity platforms that handle massive, seasonal traffic spikes (e.g., flash sales, holiday traffic) without latency or degradation.
VIRTUAL REQUIREMENTS:
At DICK’S, we thrive on innovation and authenticity. That said, to protect the integrity and security of our hiring process, we ask that candidates do not use AI tools (like ChatGPT or others) during interviews or assessments.
To ensure a smooth and secure experience, please note the following:
- Cameras must be on during all virtual interviews.
- AI tools are not permitted to be used by the candidateduring any part of the interview process.
- Offers are contingent upon a satisfactory background check which may include ID verification.
If you have any questions or need accommodations, we’re here to help. Thanks for helping us keep the process fair and secure for everyone!
Targeted Pay Range: $83,000.00 - $138,200.00. This is part of a competitive total rewards package that could include other components such as: incentive, equity and benefits. Individual pay is determined by a number of factors including experience, location, internal pay equity, and other relevant business considerations. We review all teammate pay regularly to ensure competitive and equitable pay.DICK'S Sporting Goods complies with all state paid leave requirements. We also offer a generous suite of benefits. To learn more, visit www.benefityourliferesources.com.Originally posted on Himalayas