Identity and Access Management Engineer

Role Overview
The CIAM Specialist (7 years of experience) is responsible for designing, implementing, and securing the Customer Identity layer of customer-facing applications. This role focuses on seamless user registration, high-scale authentication, application integration and protecting customer data alongwith the user experience.
Key Responsibilities
Solution Architecture: Design end-to-end authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), and SAML.
Auth0 Implementation: Configure and manage Auth0 Tenants, including custom Actions, Rules, and Hooks to extend platform functionality.
Integration: Embed Auth0 SDKs into various application environments (SPAs, Mobile, and Microservices) and integrate with third-party Identity Providers (IdPs) like Google, Apple, or enterprise SAML providers.
Security & Compliance: Implement Multi-Factor Authentication (MFA), Adaptive MFA, and Bot Detection. Ensure the platform meets regulatory standards like GDPR, CCPA, or HIPAA.
Customization: Develop custom sign-up/login pages (Universal Login) and implement branding that matches the company's digital identity.
Automation (IdC): Manage identity configurations as code using Terraform or the Auth0 Deploy CLI to ensure consistent environments across Dev, Staging, and Production.
User Migration: Designing and executing scripts for "Lazy Migration" or bulk imports of user data from legacy databases into Auth0 without forcing password resets.

Debugging & Observability: Utilizing the Auth0 Dashboard, log streaming (to tools like Splunk or Datadog), and the Management API to troubleshoot failed authentication flows and token issues.

Custom Login Flows: Developing and styling Universal Login pages to provide a consistent brand experience across multiple web and mobile properties.

Required Technical Skills
Protocols: Deep expertise in OAuth2, OIDC, SAML, and JWT (JSON Web Tokens).
Development: Proficiency in JavaScript/Node.js/React (since Auth0 Actions/Rules run on Node) and familiarity with frontend frameworks like React, Angular, or Vue.
APIs: Strong experience with RESTful API design and secure system-to-system communication (M2M).
Identity Concepts: Understanding of RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and Fine-Grained Authorization (FGA).

Preferred Qualifications
Auth0 Certification: Professional or Expert level certification.
Cloud Platforms: Experience with AWS, Azure, or GCP identity services.
Security Tools: Familiarity with SIEM/SOAR integrations (e.g., Splunk, Datadog) for monitoring identity threats.
Directory Services: Experience with LDAP, Active Directory, or other user stores.