Identity access management (W2 only)

Job Title: Identity access management

Location: Los Angeles, CA(hybrid-3days)

Duration: Long term

Open positions: 2

We are looking to supplement our team and get additional specialists that can help us transform and architect, communicate, and execute on relatively independently and help us transform this team forward.

Overview

We are seeking specializing in JavaScript and TypeScript with deep expertise in identity and access management.

This role will support the implementation of modern authentication architectures, federation patterns, and identity provider integrations, primarily with Okta, across our enterprise platforms.

Responsibilities:

Identity Implementation

• Design and implement OAuth 2.0 / OIDC authentication flows including PKCE, authorization code, and client credentials
• Build and maintain integrations with Okta (Customer Identity)
• Implement SAML and OIDC inbound and outbound federation other Identity providers
• Develop secure token handling, refresh strategies, and session management

Development

• Build authentication services and SDKs in TypeScript/Node.js
• Implement identity-aware APIs and middleware
• Create developer-friendly authentication libraries for internal teams
• Write clean, testable, well-documented code

Partner & Brand Expansion Support

• Collaborate with external partners to define and implement identity integration requirements
• Support brand expansion by designing scalable, multi-tenant identity architectures
• Translate complex identity concepts into clear documentation for partners and stakeholders
• Participate in partner onboarding calls and technical reviews
• Ensure identity solutions support white-label and co-branded experiences

Architecture Support

• Advise on identity patterns for multi-tenant and multi-territory applications
• Collaborate CloudOps and Security CoE on identity governance

Integration & Automation

• Automate Okta provisioning and configuration via APIs
• Build CI/CD pipelines for identity infrastructure
• Integrate identity events with observability platform