CIAM Engineer

CIAM Engineer (7+ Years Experience) Daily Schedule & OT estimate: 40 hrs/ week, Potential for OT as neededAssignment Duration: 6 months (extension subject to performance and fit)Role OverviewResponsible for designing, implementing, and securing the Customer Identity and Access Management (CIAM) layer for customer-facing applications, ensuring scalable authentication, seamless user experience, and data security.Candidate Requirements7+ years of relevant experienceBachelor’s degree preferred (not required)Auth0 Certification (Professional/Expert) preferredStrong hands-on experience across all required technical areas (see below)Performance measured by quality of work and ability to meet deadlinesTop Technical SkillsIdentity Protocols: Deep expertise in OAuth2, OpenID Connect (OIDC), SAML, and JWTDevelopment: Proficiency in JavaScript/Node.js (Auth0 Actions/Rules) and experience with frontend frameworks (React, Angular, or Vue)APIs: Strong experience in RESTful API design and secure system-to-system (M2M) communicationIdentity Concepts: Solid understanding of RBAC, ABAC, and Fine-Grained Authorization (FGA)Key ResponsibilitiesDesign end-to-end authentication and authorization flows using OAuth2, OIDC, and SAMLConfigure and manage Auth0 tenants, including Actions, Rules, and HooksIntegrate Auth0 with SPAs, mobile apps, and microservices; support third-party IdPs (Google, Apple, enterprise SAML)Implement security features such as MFA, Adaptive MFA, and bot detection; ensure compliance (GDPR, CCPA, HIPAA)Customize login experience (Universal Login) and brandingManage identity infrastructure as code (Terraform / Auth0 Deploy CLI) across environmentsSupport user migration (lazy migration / bulk import) from legacy systemsTroubleshoot authentication issues using logs, dashboards, and tools (e.g., Splunk, Datadog)Preferred QualificationsExperience with cloud platforms (AWS, Azure, GCP)Familiarity with SIEM/SOAR tools (e.g., Splunk, Datadog)Experience with directory services (LDAP, Active Directory)