Careers at Charles Schwab

Your opportunity

At Charles Schwab, our purpose is simple: we champion client’s goals with passion and integrity. Guided by honesty, mutual respect and a commitment to doing what’s right, we bring innovation, education, and service together to help shape financial futures. Our people are the foundation of our success – they approach their work with curiosity and collaboration, coming together to create solutions that make a meaningful impact for clients and communities. As we expand into India, we are bringing this same culture of inclusion, learning, and opportunity to new talent. Joining us means becoming part of a global team where your work matters and your future can take shape.​

Our Hyderabad location is central to Schwab’s growth, bringing together talented people and technology to drive innovation, scale and efficiency. Here, you will work alongside teams who create solutions that support millions of clients every day. The work you do is more than daily operations – it’s a chance to experiment, learn, and build within a values-driven, supportive environment. This is a unique opportunity to be part of our early growth phase and shape something new, backed by the stability and strength of a Fortune 500 company. Your impact begins on day one, and your contributions will help define our future in the region

As a Senior SSO Engineering People Leader, you will provide strategic direction and senior functional leadership for teams delivering enterprise SSO, modern authentication, federation, and identity security capabilities. This role requires strong technology understanding, broad functional experience, and the ability to lead people leaders or senior engineers through complex, high-impact identity initiatives. You will shape engineering priorities, influence enterprise identity strategy, strengthen operational resiliency, and ensure authentication services support business growth, security, compliance, and client trust.

The Senior SSO Engineering People Leader owns broader execution strategy, operational governance, and functional leadership for SSO engineering capabilities across enterprise platforms, applications, and identity ecosystems. The role is accountable for roadmap alignment, talent development, stakeholder engagement, risk reduction, audit readiness, platform modernization, and measurable delivery outcomes. This leader will partner with senior technology, cybersecurity, risk, compliance, application, infrastructure, and business leaders to advance secure, scalable, and user-centered identity services

Key Responsibilities :

• Provide overall leadership for the SSO Engineering function, including senior engineers, technical leads, and other IAM engineering resources.
• Define and execute the strategic roadmap for enterprise authentication, federation, and SSO services.
• Provide leadership and governance across technologies including SAML, OAuth 2.0, OIDC, federation, MFA, passwordless authentication, FIDO2, passkeys, and adaptive authentication.
• Establish architecture and engineering standards for enterprise authentication platforms.
• Lead modernization of legacy authentication patterns toward standards-based, cloud-ready, and Zero Trust-aligned architectures.
• Provide strategic leadership for platforms such as PingFederate, PingAccess, Microsoft Entra ID, Okta, or equivalent identity technologies.
• Drive platform scalability, resiliency, disaster recovery, high availability, security, observability, and operational maturity.
• Establish standardized patterns for workforce, application, API, cloud, and service authentication.
• Partner with enterprise architecture and cybersecurity teams to define target-state authentication architecture.
• Drive automation across application onboarding, configuration management, testing, deployments, certificate management, and platform operations.
• Champion CI/CD, Infrastructure as Code, policy-as-code, automated testing, and DevSecOps practices within IAM engineering.
• Provide governance and technical oversight for high-risk or complex authentication integrations.
• Lead major platform transformations, migrations, upgrades, consolidations, and modernization initiatives.
• Establish controls to address authentication threats including credential compromise, token misuse, session attacks, unauthorized access, and configuration vulnerabilities.
• Ensure authentication capabilities meet applicable regulatory, cybersecurity, risk, audit, and enterprise control requirements.
• Own engineering performance metrics and executive reporting covering reliability, availability, security, delivery, incidents, onboarding, automation, and technical debt.
• Partner with Product and Application Engineering leaders to prioritize demand and establish scalable application onboarding models.
• Lead capacity planning, workforce strategy, talent development, succession planning, performance management, and engineering skill development.
• Serve as an escalation point for critical authentication incidents and major technology risks.
• Influence senior leaders and stakeholders on identity strategy, technology investments, engineering priorities, and risk decisions.

What you have

Required Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, 12+ years of technology experience, with substantial experience in IAM, cybersecurity, authentication, or enterprise security engineering.
• Extensive experience designing or leading enterprise-scale SSO and federation platforms.
• Deep understanding of SAML 2.0, OAuth 2.0, OIDC, JWT, MFA, PKI, certificates, session management, and modern authentication patterns.
• Strong knowledge of enterprise IAM technologies such as Ping Identity, Microsoft Entra ID, Okta, or comparable platforms.
• Demonstrated experience leading senior engineers and complex engineering organizations.
• Experience establishing technical roadmaps, architecture standards, engineering governance, and operating models.
• Strong understanding of Zero Trust and identity-centric security architecture.
• Experience with cloud, APIs, containers, CI/CD, automation, and modern software engineering practices.
• Demonstrated success delivering large, complex, cross-functional technology programs.
• Strong executive communication, influencing, stakeholder management, and decision-making skills.
  
  

Preferred Qualifications:

• Professional certifications such as CISSP, CISM, SC-300, AZ-500, enterprise architecture, cloud security, or relevant identity provider certifications are desirable.
• Experience leading IAM engineering within financial services or another highly regulated enterprise.
• Experience modernizing large-scale legacy authentication environments.
• Knowledge of Privileged Access Management, Identity Governance, Non-Human Identities, secrets management, API security, and machine-to-machine authentication.
• Experience with Kubernetes, containerized platforms, cloud-native architectures, and public cloud security.
• Knowledge of identity threat detection, authentication telemetry, SIEM/SOC integration, and continuous monitoring.
• Relevant cybersecurity, IAM, architecture, cloud, or leadership certifications.
• Familiarity with Microsoft Entra ID, Okta, Ping Identity, Zscaler Private Access, FIDO2/Passkeys, SCIM, REST APIs, Terraform, Python, PowerShell, Git, CI/CD, AWS, Azure, GCP, Kubernetes, Docker, identity analytics, observability, AI-driven identity security, and Non-Human Identity management.
• Experience in financial services, cybersecurity risk management, regulated enterprise technology, or large-scale identity platform modernization.
• Experience leading Zero Trust, passwordless, identity governance, privileged access, cloud security, non-human identity, and resilience initiatives across multiple teams or platforms.
• Experience managing vendor relationships, platform strategy, funding/capacity tradeoffs, security control remediation, audit outcomes, and executive-level reporting.