IdentITy and Access Management (IAM) Engineer & Developer

Position 1. Senior IAM Engineer - Onelogin

Key Responsibilities:

* Design and develop custom SSO/identity broker solutions, including nonstandard authentication flows and legacy app integrations

* Design, implement, and maintain SSO integrations using OneLogin and Entra ID.

* Deep, protocollevel understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers

* Design and implementation of custom MFA and riskbased authentication flows.

* Deep experience with FIDO2/Passkey/WebAuthN, certificatebased authentication, or device trust models

* Expert in creating custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.

* Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.

* Ability to perform authentication and authorization threat modeling

* Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Preferred Qualifications for IAM Engineer

* Experience with OneLogin mappings, policies, and API-based integrations.

* Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.

Position 2: Senior IAM Developer OneLogin

Key Responsibilities:

* Design, develop, and implement custom IAM solutions and authentication workflows.

* Develop and integrate SSO solutions using OneLogin and Microsoft Entra ID.

* Build custom authentication and authorization flows using OAuth 2.0, OIDC, and SAML.

* Develop custom MFA and risk-based authentication workflows.

* Build IAM automation scripts and API integrations using Python, PowerShell, or Bash.

* Develop and maintain integrations with enterprise applications using REST APIs and SDKs.

* Implement identity provisioning and lifecycle management using SCIM and related technologies.

* Troubleshoot authentication, authorization, federation, and SSO integration issues.

* Implement secure token management, JWT validation, certificate-based authentication, and session management.

* Collaborate with application developers, security teams, and infrastructure teams to deliver secure IAM solutions.

* Perform security assessments and identify vulnerabilities in authentication and authorization flows.

Preferred Qualifications:

* Experience with OneLogin API integrations, mappings, and authentication policies.

* Knowledge of FIDO2, Passkeys, WebAuthn, and passwordless authentication.

* Experience integrating legacy applications with modern IAM solutions.

* Understanding of identity security best practices and authentication threat modeling.