Negotiable
Outside
Remote
USA
Summary: The Sr. CIAM Engineer (Full Stack) role focuses on modernizing guest identity and security for a large client base, contributing to the implementation of the CIAM strategy. The position involves developing secure, scalable software solutions while collaborating with cross-functional teams to align with business objectives. The engineer will also ensure adherence to secure coding practices and stay updated on industry trends. This role is fully remote and classified as outside IR35.
Key Responsibilities:
- Development and delivery of high-quality software solutions (both back-end and front-end) using industry-standard programming languages, technologies, and tools.
- Cross-functional collaboration with product owners, architects, UX designers, scrum masters, and other engineers to define software requirements and devise solution strategies.
- Participation in code reviews and promotion of a culture of code quality, security awareness, and knowledge sharing.
- Adherence to secure coding practices to avoid vulnerabilities and protect sensitive data.
- Implementation of effective unit testing practices to ensure proper code design, readability, and reliability.
- Balancing security with usability to ensure user-friendly solutions while maintaining robust security and scalability.
- Staying up to date on CIAM trends, standards (e.g., GDPR, CCPA), and best practices.
Key Skills:
- Bachelor's degree in computer science or comparable field of study, and/or equivalent work experience.
- Minimum of 7 years related work experience.
- Extensive IAM development experience, with a focus on customer identity (CIAM).
- Experience with implementing OAuth2, OIDC, and SAML.
- Experience with implementing Multi-Factor Authentication.
- Experience with JSON Web Tokens (JWT), JWKS, and session management.
- Experience with at least one industry leader CIAM platform (SAP Gigya, Okta, Ping, ForgeRock, Auth0, EntraID, etc.).
- Experience with REST API development in Python, Node.js, Java, and tools such as Postman, CURL.
- Experience with APIGEE, API Gateway, or comparable.
- Experience with implementing API Security and API Authorizers.
- Experience with Agile methodology and SDLC concepts/tools (Git, SCRUM, Kanban, CI/CD).
- Experience with front-end and back-end integration for customer identity flows (Screensets, HTML widgets, REST APIs, SDKs, webhooks).
- Familiarity with at least one of the following cloud providers: AWS, Google Cloud Compute, or Microsoft Azure.
- Experience with web development frameworks and protocols (HTML, JavaScript, React/Angular, Node.js).
- Strong analytical and problem-solving skills, with a focus on security and scalability.
- Excellent communication and documentation skills.
Salary (Rate): undetermined
City: undetermined
Country: USA
Working Arrangements: remote
IR35 Status: outside IR35
Seniority Level: undetermined
Industry: IT
NO Visa candidates
Job Category: Identity and Access Management (CIAM), Full Stack Engineering
Client is modernizing its global guest identity and security for its 100+ million members. As part of the Loyalty team you will be helping implement the CIAM strategy, develop software capabilities, and help deliver a secure, compliant and frictionless multi-channel solution by bringing new experiences to life for members, guests and partners.
Responsibilities
Development and delivery of high-quality software solutions (both back-end and front-end) by using industry standard programming languages, technologies and tools. Ensuring that code is secure, scalable, maintainable, and optimized for performance.
Cross-functional collaboration with product owners, architects, UX designers, scrum masters, and other engineers to define software requirements, devise solution strategies, and ensure seamless integration and alignment with business objectives.
Collaboration with peers, participate in code reviews, and promote a culture of code quality, security awareness and knowledge sharing.
Adherence to secure coding practices to avoid vulnerabilities, protect sensitive data, and ensure secure software solutions.
Implementation of effective unit testing practices to ensure proper code design, readability, and reliability.
Balance security with usability, ensuring solutions are user-friendly while maintaining robust security and scalability.
Stay up to date on CIAM trends, standards (e.g., GDPR, CCPA), and best practices.
Qualifications
Bachelor s degree in computer science, or comparable field of study, and/or equivalent work experience.
Minimum of 7 years related work experience.
Extensive IAM development experience, with a focus on customer identity (CIAM)
Experience with implementing OAuth2, OIDC and SAML
Experience with implementing Multi-Factor Authentication
Experience with JSON Web Tokens (JWT), JWKS and session management
Experience with at least one industry leader CIAM platform (SAP Gigya, Okta, Ping, ForgeRock, Auth0, EntraID, etc.)
Experience with REST API development in Python, Node.js, Java and tools such as Postman, CURL
Experience with APIGEE, API Gateway or comparable
Experience with implementing API Security, API Authorizers
Experience with Agile methodology and SDLC concepts/tools (Git, SCRUM, Kanban, CI/CD)
Experience with front-end and back-end integration for customer identity flows (Screensets, HTML widgets, REST APIs, SDKs, webhooks).
Familiarity with at least one of the following cloud providers: Amazon Web Services (AWS), Google Cloud Compute (Google Cloud Platform), or Microsoft Azure.
Experience with web development frameworks and protocols (HTML, JavaScript, React/Angular, Node.js)
Strong analytical and problem-solving skills, with a focus on security and scalability.
Excellent communication and documentation skills.
Preferred Qualifications
Experience with implementing Multi-Factor Authentication with Passkeys, FIDO, WebAuthN
Experience with implementing Social Logins
Experience with API development with OpenAPI specifications
Experience with consent management, identity proofing, fraud detection
Experience with mobile app development (iOS, Android), specifically app links and intents
Experience with integrating with 3rd party APIs (SalesForce, Twilio, Adobe, SAP, CyberArk, etc.)