Overview The Identity Access Management (IAM) Engineer will be a hands-on CIAM technical resource responsible for supporting, configuring, integrating, and troubleshooting Customer Identity and Access Management capabilities across B2B and B2C use cases. Support CIAM implementation projects through requirements analysis, configuration, integration, testing, troubleshooting, deployment support, and production issue resolution. Contribute and support the CIAM strategy aligning with the industry security trends and regulatory requirements. Improve the maturity of the CIAM products and services showing increased adoption and speed to market. Must have practical hands-on experience with CIAM platforms, application integration, APIs, scripting, troubleshooting, and production support.

Responsibilities

• Provide hands-on support for designing, configuring, implementing, and troubleshooting customer identity and access management requirements.
• Configure, customize, and support CIAM solutions using platforms such as Okta CIC/Auth0, Okta Workforce Identity, ForgeRock, Ping, or similar access management platforms.
• Build and support CIAM capabilities including registration, login, MFA, passwordless authentication, social login, progressive profiling, consent, self-service, delegated administration, audit, and reporting.
• Support adoption and migration to enterprise CIAM capabilities.
• Develop and maintain scripts, APIs, and reusable technical patterns to support CIAM operations, application onboarding, monitoring, and reporting.
• Partner with Cybersecurity, API, application, and architecture teams to support secure authentication and authorization patterns using SAML, OAuth 2.0, OIDC, JWT, SCIM, and API security best practices.
• Hands on execution of identity management roadmaps and technology enhancements.
• Support program goals and objectives leveraging expert Okta experience and skills.
• Perform technical tasks associated with current CIAM and IAM technologies.
• Creates and maintains standards surrounding documentation related to identity processes, and infrastructure.
• Provide production support for CIAM issues, including authentication failures, token/session issues, API errors, integration defects, performance issues, and user-impacting incidents.
• Support troubleshooting processes, documentation, alerts, and reporting from CIAM platforms for operational monitoring.
• Participate in incident response and security incident investigations related to IAM systems.
• Adapt the architecture to evolving security conditions and support security guidelines.
• Participate in evaluations of IAM technologies, tools, and vendors to support evolving security and business needs.
• Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders.
• Provide technical expertise in designing, configuring, and troubleshooting IAM solutions.
• Support implementation of automation and platform enhancements using Java, JavaScript/Node.js, Python, PowerShell, REST APIs, CI/CD pipelines, Terraform, or similar technologies.
• Foster the Agile DevOps culture through the latest toolset to improve customer satisfaction through rapid, continuous delivery.

Desired Candidate Profile

Minimum Qualifications:

• 3+ years of overall IT experience, with hands-on experience in IAM, access management, or CIAM.
• 3+ years of hands-on experience in authentication, access management, application integration, and production troubleshooting.
• 3+ years of hands-on experience with Okta, Auth0/Okta CIC, ForgeRock, Ping, or similar CIAM/access management platforms.
• 2+ years of development or scripting experience with Java, Spring Boot, JavaScript/Node.js, React, REST APIs, Python, PowerShell, or similar technologies.
• Strong working knowledge of SAML, OAuth 2.0, OIDC, JWT, SCIM, MFA, adaptive/risk-based authentication, session management, and API security patterns.
• Hands-on experience integrating web, mobile, API, B2B, and B2C applications with CIAM platforms using modern authentication and authorization standards.
• Experience with CIAM customization including hosted login pages, custom policies/rules/actions, user profile management, consent flows, branding, and extensibility features.
• 3+ years working with Agile and DevOps tools and methodologies.
• Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.
• BS/BA degree or equivalent experience
• CISSP / CIAM Certification is a plus.
• Experience with CIC/Auth0 platform is a plus

Preferred Qualifications:

• Experience supporting solution design and implementation of authentication services.
• Hands-on experience supporting CIAM implementation projects, including configuration, integration testing, deployment support, and post-production stabilization.
• Proven track record of understanding B2B and B2C customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards.
• Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection.
• Broader IAM domain experience with focus on information security
• Working knowledge of integrating B2B and B2C applications with CIAM.
• Working knowledge of standard IAM platforms such as Okta and PingFederate for enabling single sign-on services for cloud and on-prem applications.
• Hands-on experience supporting SSO and federation solutions using SAML, OAuth 2.0, OIDC, JWT, SCIM, and API gateway integration patterns.
• Experience supporting Consumer Identity and Access Management solutions for customer-facing applications.
• Strong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model.
• Must have working knowledge of Okta Lifecycle Management and Administrative APIs
• Experience with solutions like CyberArk, Beyond Trust, RSA or comparable products.
• Excellent understanding of REST integration concepts
• Experience in directory services like Oracle LDAP, and AD
• Experience working with cloud-based authentication solutions (e.g., AWS Cognito, Azure AD, Okta).
• Hands-on development experience with Java, Spring Boot, Node.js, React, JavaScript, REST APIs, JSON, or modern web application integration patterns.
• Hands on experience with JavaScript, Python, Ruby, PowerShell, or other scripting languages preferred.
• Experience building CICD pipelines in Azure or AWS
• Experience in automating application deployment building CICD pipelines using Ansible and terraform.
• Experience with CIAM observability, log analysis, alerting, and troubleshooting using platform logs, Splunk, ELK, API traces, browser developer tools, and application telemetry.
• Experience in Monitoring tools like Splunk, ELK, Prometheus, or similar tools
• Experience with container technologies Docker, Kubernetes
• Experience with Linux and Windows platforms, middleware, Apache, and load balancers
• Experience developing workflows, custom connectors, and troubleshooting complex issues.
• Experience with Agile and DevOps tools and methodologies
• Ability to review application authentication flows, identify integration gaps, and recommend practical technical solutions with guidance.
• Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.
• CISSP / CIAM Certification is a plus.
• Experience in SiteMinder is preferred.

Non-Technical skills:

• Exceptional communication and interpersonal skills with the ability to influence and collaborate with diverse stakeholders.
• Deliver outcomes with a little supervision, must be a self-starter and self-motivator.
• Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex and competing priorities.
• Strong project management and organizational skills, with the ability to deliver high-quality results.
• Ability to think strategically and suggest creative solutions.
• Ability to synthesize complex requirements into simple business practices.
• Flexible and able to adapt to changing priorities.