Cybersecurity Engineer - Principal

Description

This position is an onsite position and available to be filled at any Huntington Corporate office location (see location options on posting)

Summary:

The Cybersecurity Engineer - Principal is responsible for the delivery, implementation, and ongoing support of Customer Identity & Access Management (CIAM) technologies across the enterprise. This role serves as a technical leader for centralized CIAM authentication platforms, driving secure, scalable, and user-friendly identity solutions.

Duties & Responsibilities:

• Design, implement, and maintain CIAM services (Identity Federation, SSO, MFA) using PingFederate, PingOne, and PingDirectory, in alignment with enterprise security, privacy, and compliance standards.
• Lead migrations from legacy platforms (e.g., IBM TFIM/WebSEAL) to Ping Identity solutions, ensuring seamless onboarding and interoperability.
• Architect and optimize CIAM platforms for performance, scalability, and resilience, supporting environments with millions of identities.
• Develop reusable patterns and templates for SAML/OIDC integrations; drive custom API development and third-party integrations.
• Collaborate with architects, product owners, application teams, and security to align with enterprise standards and drive innovation.
• Troubleshoot and resolve authentication issues during migration and operational phases.
• Promote a culture of continuous learning, mentoring, and knowledge sharing within the SSO engineering team.
• Ensure compliance with industry standards and regulatory requirements in financial or highly regulated environments.
• Perform other duties as assigned.

Basic Qualifications:

• Bachelor's Degree or 4+ additional years of equivalent experience.
• 8+ years of production support and design of Cyber Security technologies.
• 8+ years of operational experience with security technologies.
• 8+ years of implementing or utilizing technology lifecycles and best practices.

Preferred Qualifications:

• Experience with PingOne DaVinci, PingAuthorize, PingDataSync, or orchestration platforms
• Familiarity with FDX/FAPI standards.
• Experience with CI/CD pipelines and infrastructure-as-code (e.g., Terraform).
• Strong scripting or development skills (Java, Python, .NET Core).
• Experience working in hybrid cloud environments.
• Certifications: Ping Identity, CISSP, CISM, or equivalent.

Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay)

Yes

Workplace Type:

Office

Our Approach to Office Workplace Type

Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds:  in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team.

Huntington is an Equal Opportunity Employer.

Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.

Note to Agency Recruiters:  Huntington Bank will not pay a fee for any placement resulting from the receipt of an unsolicited resume.  All unsolicited resumes sent to any Huntington Bank colleagues, directly or indirectly, will be considered Huntington Bank property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.