Core Responsibilities
Lead the implementation of secure single sign-on (SSO), federation, and identity lifecycle management workflows across cloud and hybrid environments.
Deep knowledge of standards and protocols: Auth 2.0, OIDC, SAML 2.0, SCIM, JWT, and modern web security (ILS, cookies, CORS).
Strong understanding of directory services & identity stores: LDAP, Active Directory/Azure AD, and cloud directories.
Integration skills with RESTful APls and event-driven patterns; proficiency with JSON and secure token handling.
Fraud detection & risk-based authentication: integrating risk scoring engines into CIAM flows.
Design, develop, and maintain high-performance, scalable microservices using Java 17/21 and the Spring Boot ecosystem.
Design and implement fine-grained access controls, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
Integrate applications with enterprise IAM/ldP solutions (e.g., ForgeRock, Ping, Okta, Auth0, or AWS Cognito).
Conduct threat modeling, code reviews, and vulnerability remediation to meet strict compliance standards.
Preferred Qualifications (Pluses)
- Experience with Transmit Security for identity orchestration, passwordless authentication, or advanced cross-channel journey management.
Experience with LexisNexis ThreatMetrix (or similar digital identity intelligence tools) for device fingerprinting, fraud detection, and risk-based step-up authentication.
Never miss an opportunity! Create an alert based on the job you applied for.
