Digital Service Expert (Engineering) Remote From Anywhere In Colorado

Together, we innovate for a stronger Colorado

The work of employees at the Governor's Office of Information Technology (OIT) is challenging and diverse because the needs of agencies, customers and Coloradans constantly evolve. But our focus never changes: improve the lives of all Coloradans through innovation and collaboration. We're building one of the nation's leading government IT organizations by reimagining how we support agencies, building first-of-their-kind applications, and creating an inclusive, collaborative culture, together. Join us in the important work of providing equitable access to services.

Watch this video to learn more about how we're Serving People. Serving Colorado.

TERM LIMITED POSITION: This position is term-limited with an anticipated end date of approximately three years from the date of hire. This position is eligible for State employee benefits and may be extended as the situation warrants. This video explains the many benefits of working at the State of Colorado on a term-limited basis. 

IMPORTANT NOTE: Please review your application to ensure completion. For the most equitable applicant experience, OIT’s hiring team considers only the contents of your application to review your qualifications. Please do not include any attachments (such as resume or cover letter) with your application as these items are not used by OIT’s hiring team. 

Digital Service Experts are experienced technologists who are part of the Colorado Digital Service (CDS) within the Governor's Office of Information Technology. This cross-functional team both owns public-facing products and partners with agencies across the state to deliver Coloradan-centered digital services. While all positions will contribute to the entire mission of OIT and CDS, some positions will focus on specific aspects of the mission, such as software engineering, product management, etc.

The Digital Service Expert with a focus on Engineering is responsible for technical consulting, solutioning, and creation and ownership of digital products and solutions. This role will help shape Sign in with myColorado, Colorado’s shared sign-in and digital account service built around a clear vision: using myColorado as the single account people can use to access state services and prove their identity.

The person in this role will have a proven background and hands-on experience in all aspects of the software development life cycle, architecting, coding, and delivering reliable, trustworthy experiences.  They will apply their experience to support establishing technical strategies, technology and vendor evaluations, building prototypes, designing and managing integrated solutions, and coaching/collaborating with existing engineering teams.

We are looking for an individual with high skills in CIAM development, with broad expertise in the Ping Identity ecosystem, specifically the PingOne platform. This role focuses on designing and delivering secure, scalable identity solutions, including SSO, MFA, and adaptive authentication, aligned with modern enterprise and customer identity strategies. This role will lead the design, implementation, and ongoing management of PingOne as a centralized Identity Provider (IdP) supporting multiple public-facing State of Colorado systems, while also overseeing the development of a custom user-facing web application user portal for authentication support and user profile management.

This is a hands-on technical lead role intended to work with the Product Manager to define features and scope, set technical direction, guide engineers, and directly contribute to the implementation of integrations and platform enhancements.

Some Key Responsibilities:

Identity Platform Leadership

• Lead technical design and implementation of PingOne services as a centralized IdP across multiple applications and user groups (i.e. B2C, B2B).

• Ensure best-practices implementation and support for Multi-Factor Authentication (MFA), identity verification (IDV), and fraud prevention services.

• Build and orchestrate identity workflows using PingOne DaVinci.

• Integrate applications using OAuth 2.0, OpenID Connect (OIDC), and SAML.

• Develop and maintain REST APIs and custom connectors for identity integrations (IDV, Socure, etc).

• Implement and administer adaptive and risk-based authentication services (experience with PingOne Protect is a plus).

• Collaborate with UX, security, application, and infrastructure teams to align security and user experience goals.

• Troubleshoot and optimize authentication flows, policies, and user experience.

• Ensure high availability, scalability, and security of the identity platform.

Application & Portal Development

• Lead development of a custom web portal for:

  • User login and authentication support

  • Profile, consent, and credential management

  • Self-service account recovery and MFA enrollment

• Establish front-end and back-end application patterns.

• Ensure seamless integration between the portal and PingOne APIs/services.

• Guide UX decisions to balance usability with security requirements.

Technical Leadership

• Provide technical direction and decisions to engineers across teams.

• Review code, design, and integration patterns.

• Collaborate with product, security, and infrastructure teams to align priorities.

• Manage DevOps, SDLC, and drive adoption of best practices in CI/CD, testing, and observability.

• Ensure that all solutions implemented comply with state and federal requirements for digital accessibility and established best practices for usability.

Operations & Governance

• Monitor system performance, reliability, security, and accessibility posture.

• Implement logging, auditing, and alerting for identity events.

• Support compliance and governance requirements (e.g., access reviews, audit trails).

• Manage vendor relationships and roadmap alignment with PingOne capabilities.

Success in this role requires someone who can navigate complex stakeholder environments independently, translate between technical and non-technical audiences, and build sustainable processes that outlast any single project. You must be highly adaptable and comfortable with changing priorities as we learn what works best for Colorado.

This position offers a unique opportunity to fundamentally improve how Colorado delivers digital services while ensuring they are truly accessible and beneficial to all residents. Your work will directly impact how millions of Coloradans interact with their government services while supporting Colorado's mission of expanding opportunity and reducing poverty.

A wide salary range is posted for this position and any job offer is based upon a salary analysis to comply with the Colorado Equal Pay for Equal Work Act. The salary analysis considers relevant experience, education, certifications, and state seniority as compared to others doing substantially similar work. While most salary offers are made within the posted range, occasionally an offer is made below or above the posted range based upon this salary analysis.

This is a skills-based job announcement. The required minimum qualifications and/or education (if substituting for the proven experience, knowledge, and skills) are as follows:

Minimum Qualifications:

• At least five (5) years of experience developing software in complex environments.

• Documented proficiency in working collaboratively with teams across the software development life cycle.

Substitutions:

• Additional appropriate education will substitute for the required experience on a year-for-year basis, but cannot completely substitute for these qualifications. 

• Training or Certification related to the work assigned to the position will be assigned credit towards substitution for experience and/or education, but cannot completely substitute for these qualifications. 

Preferred Qualifications:

• At least five (5) years of experience in Identity & Access Management (IAM) or related domain.

• Hands-on experience with PingOne or comparable IAM platforms (Okta, Auth0, etc).

• Strong understanding of authentication protocols: OAuth 2.0, OpenID Connect, SAML.

• Familiarity with HTTP session mechanics and token-based session management.

• Strong understanding of Identity Verification (IDV), Multi-Factor Authentication (MFA), and adaptive authentication techniques.

• Experience building and integrating APIs and web applications.

• Proficiency in modern web development (e.g., JavaScript/TypeScript, REST APIs).

• Experience designing secure, scalable distributed systems.

• Ability to lead technical decisions and manage technical operations across team members.

• Experience implementing customer identity and access (CIAM) solutions in large, multi-system environments.

• Experience building and orchestration of identity workflows using PingOne DaVinci or a similar platform.

• Experience with debugging real-world SSO/session issues across multiple applications.

• Familiarity with identity governance, lifecycle management, and zero trust principles.

• Familiarity with PII data privacy and user consent principles.

• Experience with cloud platforms (AWS, GCP).

• Knowledge of accessibility and user-centered design for public-facing services.

• Experience in public sector or highly regulated environments.

Conditions of Employment:

OIT employees must comply with any screening procedures in place at state agency locations where they might perform work. 

A pre-employment background check will be conducted as part of the selection process. Post-employment background checks will be required for specific agencies as business needs dictate, which may include a polygraph exam, fingerprint-based criminal history search, reference checks, and a drug test.

This position may require travel within the specified geographic area, and to locations across the state as needed. 

This position may require on-call duties as needed by the position. 

If this posting indicates “remote from anywhere in CO” in the title, periodic reporting to the primary state work location designated for the position is required. All remote work must be performed in Colorado. 

While candidates from out of state will be considered for this role, the candidate selected for the position must relocate and reside in Colorado on the first day of their new position.  A reasonable timeframe for relocation will be established on an individual basis, while considering business needs, and determining a start date.

We know it's important to support each other, and that means having a healthy balance of work and personal time. Visit our benefits to learn more about some of our great offerings that allow us all to have fulfilling lives. 

Visit our How to Apply webpage to learn more about our application process and what to expect after you apply.

The State of Colorado strives to create a Colorado for All by building and maintaining workplaces that value and respect all Coloradans through a commitment to equal opportunity and hiring based on merit and fitness.  The State is resolute in non-discriminatory practices in everything we do, including hiring, employment, and advancement opportunities.

The Governor's Office of Information Technology is committed to the full inclusion of all qualified individuals. As part of this commitment, our agency will assist individuals who have a disability with any reasonable accommodation requests related to employment, including completing the application process, interviewing, completing any pre-employment testing, participating in the employee selection process, and/or to perform essential job functions where the requested accommodation does not impose an undue hardship. If you have a disability and require reasonable accommodation to ensure you have a positive experience applying or interviewing for this position, please direct your inquiries to our ADA Coordinator at [email protected] or call (303) 764-7900.

This posting may be used to fill multiple vacancies based upon business need. 

The Governor's Office of Information Technology does NOT offer sponsored Visas for employment purposes.