CIAM Engineer
ARCHIVED
We can't find an active application page for this role right now. It may reopen or be listed elsewhere. Use Next Steps to search for an active apply link and similar live jobs.
CIAM Engineer (7+ Years Experience) Daily Schedule & OT estimate: 40 hrs/ week, Potential for OT as needed Assignment Duration: 6 months (extension subject to performance and fit)
Role Overview:
- Responsible for designing, implementing, and securing the Customer Identity and Access Management (CIAM) layer for customer-facing applications, ensuring scalable authentication, seamless user experience, and data security.
- Candidate Requirements 7+ years of relevant experience
- Bachelor’s degree preferred (not required)
- Auth0 Certification (Professional/Expert) preferred
- Strong hands-on experience across all required technical areas (see below)
- Performance measured by quality of work and ability to meet deadlines
- Top Technical Skills
Identity Protocols: Deep expertise in OAuth2, OpenID Connect (OIDC), SAML, and JWTDevelopment: Proficiency in JavaScript/Node.js (Auth0 Actions/Rules) and experience with frontend frameworks (React, Angular, or Vue)APIs: Strong experience in RESTful API design and secure system-to-system (M2M) communication
Identity Concepts: Solid understanding of RBAC, ABAC, and Fine-Grained Authorization (FGA)
Key Responsibilities:
- Design end-to-end authentication and authorization flows using OAuth2, OIDC, and SAMLConfigure and manage Auth0 tenants, including Actions, Rules, and Hooks
- Integrate Auth0 with SPAs, mobile apps, and microservices; support third-party IdPs (Google, Apple, enterprise SAML)
- Implement security features such as MFA, Adaptive MFA, and bot detection; ensure compliance (GDPR, CCPA, HIPAA)
- Customize login experience (Universal Login) and branding
- Manage identity infrastructure as code (Terraform / Auth0 Deploy CLI) across environments
- Support user migration (lazy migration / bulk import) from legacy systems
- Troubleshoot authentication issues using logs, dashboards, and tools (e.g., Splunk, Datadog)
Preferred Qualifications:
- Experience with cloud platforms (AWS, Azure, GCP)
- Familiarity with SIEM/SOAR tools (e.g., Splunk, Datadog)
- Experience with directory services (LDAP, Active Directory)