Identity access management

Title: Identity access management- 
Location: Los Angeles, CA (hybrid-3days)
Duration: Long term
We are looking to supplement our team and get additional specialists that can help us transform and architect, communicate, and execute on relatively independently and help us transform this team forward.
Overview
We are seeking specialization in JavaScript and TypeScript with deep expertise in identity and access management. 
This role will support the implementation of modern authentication architectures, federation patterns, and identity provider integrations, primarily with Okta, across our enterprise platforms.
Responsibilities:
Identity Implementation
•    Design and implement OAuth 2.0 / OIDC authentication flows including PKCE, authorization code, and client credentials
•    Build and maintain integrations with Okta (Customer Identity)
•    Implement SAML and OIDC inbound and outbound federation other Identity providers
•    Develop secure token handling, refresh strategies, and session management
Development
•    Build authentication services and SDKs in TypeScript/Node.js
•    Implement identity-aware APIs and middleware
•    Create developer-friendly authentication libraries for internal teams
•    Write clean, testable, well-documented code
Partner & Brand Expansion Support
•    Collaborate with external partners to define and implement identity integration requirements
•    Support brand expansion by designing scalable, multi-tenant identity architectures
•    Translate complex identity concepts into clear documentation for partners and stakeholders
•    Participate in partner onboarding calls and technical reviews
•    Ensure identity solutions support white-label and co-branded experiences
Architecture Support
•    Advise on identity patterns for multi-tenant and multi-territory applications
•    Collaborate CloudOps and Security CoE on identity governance
Integration & Automation
•    Automate Okta provisioning and configuration via APIs
•    Build CI/CD pipelines for identity infrastructure
•    Integrate identity events with observability platform