CIAM Engineer
Core
Design, build, and operate secure customer identity and access management services for web and mobile applications, managing the full identity lifecycle from registration to account deletion.
Role type
Senior IC CIAM Engineer
Builds
Customer identity journeys, authentication policies, federation connections, and automated deployment pipelines for identity services.
Domain
Cybersecurity / Identity and Access Management (IAM)
Required skills
OAuth 2.0, OpenID Connect, SAML 2.0, MFA implementation, account recovery, CI/CD, backend programming (Java, C#, TypeScript, Python, Go), automated testing, production troubleshooting, identity platform configuration
Preferred skills
Passkeys/WebAuthn/FIDO2, risk-based authentication, bot mitigation, identity platform migration, Infrastructure-as-Code (Terraform), GDPR compliance
Technologies
Auth0, Ping Identity, Microsoft Entra External ID, AWS Cognito, OpenID Connect, OAuth 2.0, SAML 2.0, WebAuthn, FIDO2, Terraform
Responsibilities
Design and implement customer identity journeys including registration, verification, sign-in, and account deletion; Integrate applications with CIAM platforms using OIDC, OAuth 2.0, and SAML 2.0; Configure authentication policies, federation connections, and session settings; Implement controls against account takeover and credential stuffing; Build automated tests and deployment pipelines; Monitor authentication metrics and investigate production incidents; Partner with security teams on data controls and privacy requirements; Maintain technical documentation and operational runbooks.