SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

JOB SUMMARY

Join SMBC's global Customer Identity and Access Management (CIAM) team to help design, modernize, and scale our PingOne Advanced Identity Cloud (AIC) platform. In this role, you will lead the development and refactoring of authentication journeys that support regional business, regulatory, and customer requirements across global markets. You will work on platform architecture, automation, resiliency, and identity integrations to deliver secure, scalable, and consistent customer experiences.

PRINCIPAL DUTIES AND RESPONSIBILITIES

• Design, develop, and maintain customer identity and access management solutions using PingOne AIC.
• Refactor authentication journeys to support regional policies, customer requirements, and configurable integrations with external services such as risk analytics and identity verification providers.
• Modernize and migrate legacy PingOne AIC scripts and components to current platform standards.
• Troubleshoot and improve authentication flows, access policies, and customer sign-in experiences.
• Build and maintain integrations using identity standards such as OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Use CI/CD pipelines to automate testing, deployment, and release processes.
• Ensure CIAM solutions align with applicable regulatory and compliance requirements, including privacy, consent, and regional data residency obligations.
• Improve platform resiliency by implementing disaster recovery capabilities, recovery objectives, and operational support procedures.

POSITION SPECIFICATIONS

• 4+ years of experience in Identity and Access Management (IAM).
• Extensive hands-on experience with PingOne Advanced Identity Cloud (AIC).
• Strong knowledge of authentication, authorization, session management, and customer identity solutions.
• Experience implementing and supporting MFA, OTP, and risk-based authentication.
• 4+ years of experience developing JavaScript-based solutions.
• Experience building and supporting REST APIs.
• Strong understanding of identity protocols, including SAML, OAuth 2.0, and OpenID Connect (OIDC).
• 2+ years of experience with CI/CD pipelines and DevOps practices.
• Experience working in cloud-native or hybrid IAM environments.
• Familiarity with SSL/TLS certificate management.
• Understanding of privacy, consent, data residency, and regulatory requirements that impact CIAM platforms.
• Bachelor's degree in Computer Science, Cybersecurity, Mathematics, or a related field, or equivalent practical experience.

NICE TO HAVE

• ForgeRock or Ping Identity certification, including PingOne AIC Certified Professional.
• Experience supporting global CIAM platforms across multiple regions.
• Familiarity with financial services regulatory frameworks such as PSD2, PSD3, MAS, or GDPR.
• Experience designing highly available IAM solutions with disaster recovery and business continuity requirements.

SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.