Senior Remote Lead Technical Engineer – Customer Identity Access Management (CIAM) – Architecting Secure, Scalable Enterprise Identity Solutions

About brighthush

brighthush is a global leader in digital identity and access management, empowering organizations to secure their digital ecosystems while delivering friction‑less user experiences. With a portfolio that spans cloud‑native identity platforms, advanced authentication services, and AI‑driven threat detection, brighthush helps enterprises of all sizes protect their data, comply with regulatory mandates, and accelerate digital transformation. Our culture is built on curiosity, collaboration, and a relentless focus on customer success. As a remote‑first company, we bring together top talent from around the world, fostering an environment where innovation thrives and every voice is heard.

Role Overview

We are seeking a seasoned engineering leader to join brighthush as a Remote Lead Technical Engineer – Customer Identity Access Management (CIAM). In this pivotal role, you will serve as the technical subject‑matter expert for CIAM across the enterprise, guiding a diverse team of engineers to deliver end‑to‑end solutions that drive commercial outcomes. You will partner closely with product, security, operations, and business stakeholders to design, develop, and deploy scalable, reliable, and resilient identity solutions that meet the evolving needs of our customers.

Why This Role Matters

Identity is the new perimeter. As organizations shift to hybrid and multi‑cloud environments, the demand for robust, user‑centric identity solutions has never been higher. At brighthush, our CIAM platform sits at the heart of our product suite, enabling secure authentication, authorization, and user management for millions of users worldwide. Your leadership will directly influence the security posture, user experience, and revenue growth of our clients, making this role critical to our mission of redefining digital trust.

Key Responsibilities

• Strategic Leadership: Collaborate with the CIAM Technical Program Manager to translate business priorities into technical roadmaps, ensuring alignment with the overall IAM strategy.
• Team Management: Lead, mentor, and inspire a cross‑functional team of engineers, fostering a culture of ownership, continuous improvement, and high performance.
• Solution Architecture: Design and architect enterprise‑wide CIAM solutions that are scalable, secure, and maintainable, leveraging best practices in identity federation, authentication protocols, and directory services.
• Project Delivery: Coordinate engineering resources, set realistic timelines, and manage risk to deliver high‑quality solutions on schedule and within budget.
• Technical Coaching: Guide developers through complex design and implementation challenges, ensuring adherence to coding standards, security guidelines, and architectural principles.
• Stakeholder Communication: Translate technical concepts into clear, actionable insights for non‑technical audiences, including executives, product managers, and customer success teams.
• Documentation & Knowledge Sharing: Create and maintain comprehensive technical documentation, architecture diagrams, and best‑practice guides to support knowledge transfer and future maintenance.
• Issue Resolution: Provide expert‑level troubleshooting for production incidents, root cause analysis, and post‑mortem reviews to continuously improve system reliability.
• Innovation & Thought Leadership: Stay abreast of emerging identity technologies, evaluate new tools, and propose innovative solutions that keep brighthush at the forefront of the CIAM market.

Essential Qualifications

• 5–7+ years of engineering experience focused on CIAM, identity federation, and integration projects.
• Strong background in designing and implementing identity solutions using industry standards such as SAML, OIDC, OAuth 2.0, and SSO.
• Hands‑on experience with identity platforms (e.g., Okta, ISAM, TFIM) and directory services (AD, LDAP, Azure AD, Oracle LDAP).
• Proven track record of leading technical teams through complex, cross‑functional projects.
• Excellent communication skills, with the ability to articulate technical concepts to both technical and non‑technical stakeholders.
• Strong problem‑solving mindset and a passion for building secure, scalable systems.
• Experience with cloud platforms (AWS, Azure, GCP) and containerization (Docker, Kubernetes) is highly desirable.
• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related field.

Preferred Qualifications

• Advanced knowledge of Identity‑as‑a‑Service (IDaaS) solutions and their integration patterns.
• Experience with multi‑factor authentication (MFA), risk‑based authentication, and adaptive identity solutions.
• Familiarity with compliance frameworks (GDPR, CCPA, HIPAA, SOC 2) and data privacy best practices.
• Certifications such as CISSP, CISM, or relevant cloud security credentials.
• Experience in a SaaS or high‑scale, multi‑tenant environment.
• Previous leadership roles in a remote or distributed engineering organization.

Skills & Competencies

• Technical Expertise: Deep understanding of authentication protocols, identity federation, and secure API design.
• Architectural Vision: Ability to design modular, extensible systems that can evolve with emerging standards.
• Project Management: Proficiency in agile methodologies, sprint planning, and resource allocation.
• Mentorship: Commitment to coaching junior engineers and fostering a culture of learning.
• Collaboration: Proven ability to work effectively with product, security, operations, and customer success teams.
• Analytical Thinking: Strong analytical skills to diagnose complex issues and propose data‑driven solutions.
• Communication: Clear, concise written and verbal communication tailored to diverse audiences.

Career Growth & Learning Opportunities

At brighthush, your professional development is a priority. As a Lead Technical Engineer, you will:

• Lead high‑impact projects that shape the future of identity technology.
• Participate in cross‑functional leadership forums and strategy sessions.
• Access a curated learning library, including courses on advanced identity, cloud security, and emerging AI‑driven authentication.
• Earn industry certifications with company sponsorship.
• Mentor and coach junior engineers, building a legacy of technical excellence.
• Explore opportunities to transition into senior architecture, product management, or executive roles.

Work Environment & Culture at brighthush

brighthush thrives on a remote‑first, inclusive culture that values autonomy, transparency, and continuous improvement. Our team members enjoy:

• Flexible work hours that respect personal and cultural commitments.
• Regular virtual town halls, hackathons, and knowledge‑sharing sessions.
• A collaborative platform that encourages open dialogue across time zones.
• Access to state‑of‑the‑art tools and resources that enable high‑quality engineering.
• A commitment to diversity, equity, and inclusion, with dedicated employee resource groups.

Compensation, Perks, and Benefits

While specific figures vary by experience and location, brighthush offers a competitive total rewards package that includes:

• Base salary commensurate with market rates for senior engineering leaders.
• Performance‑based bonuses and equity opportunities.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off, including vacation, sick leave, and personal days.
• Professional development stipend and conference travel support.
• Wellness programs, mental health resources, and flexible work arrangements.
• Employee referral bonuses and a supportive, collaborative culture.

How to Apply

Ready to lead the next generation of secure, user‑centric identity solutions? Submit your resume and a brief cover letter outlining your experience with CIAM, leadership achievements, and why you’re excited about joining brighthush. We look forward to exploring how your expertise can help us shape the future of digital trust.