Role Overview
We are looking for an experienced Senior CIAM Engineer with strong expertise in Okta Customer Identity and Access Management (CIAM), identity federation, authentication protocols, and enterprise identity security.
The ideal candidate will have hands-on experience designing, implementing, and managing Okta-based CIAM solutions for customer-facing digital platforms. The candidate should have strong knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and SCIM, along with experience integrating identity services with web applications, mobile applications, and backend APIs.
The role also requires knowledge of identity security best practices, consent management, identity verification, and software assurance principles.
Key Responsibilities
1. Okta CIAM Implementation & Architecture
Design, implement, and maintain Customer Identity and Access Management (CIAM) solutions using Okta.
Configure and manage customer identity services, authentication workflows, and authorization policies.
Implement user registration, login, account recovery, and profile management.
Configure Multi-Factor Authentication (MFA), Social Login, and Single Sign-On (SSO).
Implement consent management and customer identity lifecycle management.
Ensure scalability, security, and availability of identity services.
2. Identity Federation & Authentication
Implement identity federation and token-based authentication mechanisms.
Work with authentication and authorization standards, including:
Configure secure authentication and authorization flows.
Implement API security and secure token management.
Integrate Okta with enterprise and third-party identity providers.
3. Application & API Integration
Integrate Okta identity services with frontend and backend applications.
Support customer authentication flows across web applications, mobile applications, and APIs.
Implement identity integrations using REST APIs, SDKs, and webhooks.
Collaborate with frontend and backend developers to ensure seamless authentication experiences.
Support integrations with technologies such as JavaScript, React, and Node.js.
4. Identity Security & Compliance
Design and enforce CIAM policies covering data privacy, identity proofing, and consent management.
Implement adaptive authentication and risk-based authentication mechanisms.
Support identity verification and customer access control.
Ensure compliance with data privacy regulations such as GDPR and CCPA.
Apply secure identity management practices and software assurance principles.
Support security assessments and improvements aligned with the Software Assurance Maturity Model (SAMM).
5. Monitoring & Troubleshooting
Monitor identity events, authentication activities, and system performance.
Perform root cause analysis of authentication and authorization issues.
Troubleshoot SSO, MFA, token, and identity federation issues.
Optimize identity platform performance, scalability, and availability.
Identify and resolve integration and security-related issues.
6. Technical Documentation & Collaboration
Prepare detailed technical documentation, solution architecture, and integration playbooks.
Work closely with security teams, architects, developers, and business stakeholders.
Participate in technical design discussions and solution reviews.
Communicate technical solutions and recommendations effectively.
Stay updated with CIAM technologies, identity standards, and security best practices.
