CIAM Engineer--OAuth2, OIDC, SAML
Newark, Ohio, United States of America
Contract
20 hours ago
$100 - $106 USD
Key skills
JavaScriptReactVueAngularNode.jsTerraformOAuthAuth0JWTSAMLDatadogSplunkRESTfulCommunication
About this role
Job Title - CIAM Engineer
Start/End Dates: 4/20/2026 - 9/30/2026
Work Location: Newark, CA (Hybrid)
Top 3 Hard Skills Required + Years of Experience
- Minimum 7 years experience with Protocols: Deep expertise in OAuth2, OIDC, SAML, and JWT (JSON Web Tokens).
- Minimum 7 years experience with Development: Proficiency in JavaScript/Node.js/React (since Auth0 Actions/Rules run on Node) and familiarity with frontend frameworks like React, Angular, or Vue.
- Identity Concepts: Understanding of RBAC (Role-Based Access Control), ABAC (Attribute-Based Access Control), and Fine-Grained Authorization (FGA).
- Minimum 7 years experience with APIs: Strong experience with RESTful API design and secure system-to-system communication (M2M).
Role Overview
The CIAM Specialist (7+ years of experience) is responsible for designing, implementing, and securing the Customer Identity layer of customer-facing applications. This role focuses on seamless user registration, high-scale authentication, application integration and protecting customer data along with the user experience.
Key Responsibilities
Solution Architecture: Design end-to-end authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), and SAML.
Auth0 Implementation: Configure and manage Auth0 Tenants, including custom Actions, Rules, and Hooks to extend platform functionality.
Integration: Embed Auth0 SDKs into various application environments (SPAs, Mobile, and Microservices) and integrate with third-party Identity Providers (IdPs) like Google, Apple, or enterprise SAML providers.
Security & Compliance: Implement Multi-Factor Authentication (MFA), Adaptive MFA, and Bot Detection. Ensure the platform meets regulatory standards like GDPR, CCPA, or HIPAA.
Customization: Develop custom sign-up/login pages (Universal Login) and implement branding that matches the company s digital identity.
Automation (IdC): Manage identity configurations as code using Terraform or the Auth0 Deploy CLI to ensure consistent environments across Dev, Staging, and Production.
User Migration: Designing and executing scripts for "Lazy Migration" or bulk imports of user data from legacy databases into Auth0 without forcing password resets.
Debugging & Observability: Utilizing the Auth0 Dashboard, log streaming (to tools like Splunk or Datadog), and the Management API to troubleshoot failed authentication flows and token issues.
Custom Login Flows: Developing and styling Universal Login pages to provide a consistent brand experience across multiple web and mobile properties.