Customer Identity and Access EngineerOAuth2, OIDC, SAML,IAM

Job Title - CIAM Engineer Start/End Dates: 4/20/2026 - 9/30/2026 Work Location: Newark, CA (Hybrid) Top 3 Hard Skills Required Years of Experience Minimum 7 years experience with Protocols: Deep expertise in OAuth2, OIDC, SAML, and JWT (JSON Web Tokens). Minimum 7 years experience with Development: Proficiency in JavaScript/Node.js/React (since Auth0 Actions/Rules run on Node) and familiarity with frontend frameworks like React, Angular, or Vue. Identity Concepts: Understanding of RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and Fine-Grained Authorization (FGA). Minimum 7 years experience with APIs: Strong experience with RESTful API design and secure system-to-system communication (M2M). Role Overview The CIAM Specialist (7 years of experience) is responsible for designing, implementing, and securing the Customer Identity layer of customer-facing applications. This role focuses on seamless user registration, high-scale authentication, application integration and protecting customer data along with the user experience. Key Responsibilities Solution Architecture: Design end-to-end authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), and SAML. Auth0 Implementation: Configure and manage Auth0 Tenants, including custom Actions, Rules, and Hooks to extend platform functionality. Integration: Embed Auth0 SDKs into various application environments (SPAs, Mobile, and Microservices) and integrate with third-party Identity Providers (IdPs) like Google, Apple, or enterprise SAML providers. Security & Compliance: Implement Multi-Factor Authentication (MFA), Adaptive MFA, and Bot Detection. Ensure the platform meets regulatory standards like GDPR, CCPA, or HIPAA. Customization: Develop custom sign-up/login pages (Universal Login) and implement branding that matches the company s digital identity. Automation (IdC): Manage identity configurations as code using Terraform or the Auth0 Deploy CLI to ensure consistent environments across Dev, Staging, and Production. User Migration: Designing and executing scripts for "Lazy Migration" or bulk imports of user data from legacy databases into Auth0 without forcing password resets. Debugging & Observability: Utilizing the Auth0 Dashboard, log streaming (to tools like Splunk or Datadog), and the Management API to troubleshoot failed authentication flows and token issues. Custom Login Flows: Developing and styling Universal Login pages to provide a consistent brand experience across multiple web and mobile properties.bfb3568a-762b-4989-884b-a9682aa104ca