Job Summary
Key Responsibilities
Job Responsibilities : Key Responsibilities IAM & CIAM Engineering and Solution Delivery • Design, develop, and enhance Workforce IAM and CIAM solutions across Okta, Okta Auth0, Okta Access Gateway, Microsoft Entra ID (Azure AD), and Conditional Access, leveraging AI-assisted analysis to accelerate design, reduce rework, and improve implementation quality • Engineer authentication solutions supporting Zero Trust and CIAM use cases, including MFA, passwordless authentication, adaptive and risk based access, privileged access, and customer identity flows, using AI-supported insights to identify edge cases, optimize controls, and reduce configuration drift • Design and implement secure authentication, authorization, and federation patterns using SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM, leveraging AI to accelerate pattern selection, integration validation, and troubleshooting of federation failures • Deliver identity lifecycle and access models for workforce users, partners, and customers, including CIAM sign up, sign in, profile management, and consent flows, leveraging AI to identify lifecycle inefficiencies, improve journey design, and enhance governance outcomes CIAM (Customer Identity) Enablement – Okta Auth0 • Design and implement CIAM architectures using Okta Auth0 for customer facing and digital applications, leveraging AI-assisted analysis to validate design decisions and improve architecture consistency • Engineer secure and scalable customer authentication flows, including social identity providers, progressive profiling, step up authentication, and fraud aware access controls, using AI to identify high-risk patterns, reduce fraud exposure, and improve reliability • Define CIAM patterns that balance security, regulatory compliance, and customer experience, using AI-supported insights to evaluate trade-offs and improve policy effectiveness • Partner with digital application teams to integrate Auth0 into customer platforms and APIs, leveraging AI to accelerate integration assessment, dependency analysis, and defect isolation • Ensure CIAM implementations align with privacy, data protection, and regulatory requirements (e.g., consent, minimal data collection), using AI-assisted review to improve control validation and compliance assurance Conditional Access & Zero Trust Enablement • Design, implement, and continuously improve Conditional Access policies aligned with security standards and Zero Trust architecture, leveraging AI-assisted monitoring/analytics to detect policy gaps, risky exceptions, and misconfigurations • Define scalable Conditional Access patterns for workforce users, privileged roles, devices, applications, and workload identities, using AI to identify reusable patterns and reduce manual policy tuning effort • Engineer policy automation, validation, and safe deployment mechanisms to reduce risk and configuration drift, leveraging AI-supported insights to predict change impact and reduce failure rates • Partner with security and architecture teams to evolve baseline protections and Zero Trust strategy, using AI-driven insights to support measurable improvements in control effectiveness Platform Engineering & Automation • Develop automation using APIs, SDKs, scripting, and configuration as code to improve IAM and CIAM platform reliability and efficiency, leveraging AI to identify automation candidates, optimize scripts, and reduce manual operational effort • Support CI/CD pipelines and controlled promotion of IAM, CIAM, and Conditional Access changes across environments, using AI insights to improve pipeline quality, detect anomalies, and accelerate troubleshooting • Contri
Skill Requirements
Skill Requirement : Skills & Experience Technical Expertise • Extensive experience (10+ years) in IAM and/or CIAM engineering within a large enterprise environment. • Strong hands-on experience with Okta Workforce IAM and Okta Auth0 (CIAM) and/or Microsoft Entra ID Conditional Access. • Deep understanding of Zero Trust architecture, CIAM patterns, authentication, authorization, and identity lifecycle management. • Proven experience with SAML, OAuth, OpenID Connect, and SCIM. • Experience developing integrations using APIs, scripting, or programming languages ( .NET, Python, PowerShell, JavaScript, NodeJS, Angular). • Experience supporting cloud first, SaaS, API driven, and hybrid identity architectures. • Demonstrated experience applying AI to materially improve engineering workflows (design validation, troubleshooting, impact analysis, documentation, automation) -can describe before/after outcomes • Strong problem-framing skills: can provide context, constraints, and expected outcomes to get reliable AI-assisted results • Track record of using AI-supported insights to identify optimization opportunities and reduce manual remediation effort
Other Requirements
Other Requirement : Professional Capabilities • Strong analytical mindset with a security first, customer aware engineering approach. • Ability to clearly articulate complex IAM, CIAM, and Conditional Access designs to diverse stakeholders. • Comfortable operating in a global, regulated, and risk focused environment. • Strong collaboration, influencing, and stakeholder management skills. • High standards of ownership, accountability, and engineering excellence. • Ability to drive AI adoption expectations within engineering teams and hold delivery accountable for measurable outcomes Education • Bachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent professional experience.