Okta Auth0 CIAM Lead

JOB SUMMARY
This role requires a hands-on developer with extensive experience in designing and building customer identity solutions using Auth0. The focus is on developing secure, scalable authentication and authorization capabilities, integrating applications, and enhancing user experience through modern identity patterns.

Key Responsibilities
• Design and implement Auth0-based CIAM solutions across multiple applications and environments.
• Develop and customize authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), PKCE, and SAML.
• Build and maintain Auth0 Actions and custom authentication logic.
• Configure and extend token generation, including custom claims, scopes, and attribute mappings.
• Integrate Auth0 with web, mobile, and backend applications.
• Design and implement custom login, signup, and consent experiences using Universal Login and embedded patterns.
• Develop and manage user lifecycle flows (registration, updates, deactivation) using Auth0 Management APIs.
• Implement progressive profiling, metadata enrichment, and account linking/identity merging strategies.
• Implement advanced authentication capabilities including: MFA, Adaptive/risk-based authentication, Passwordless login (OTP, magic links, passkeys/WebAuthn).
• Develop and secure APIs using Auth0 with RBAC and ABAC models and implement fine-grained authorization.
• Implement token validation in backend systems (JWT validation, JWKS, scope and audience enforcement).
• Configure and manage federation integrations with social and enterprise identity providers.
• Develop custom database connections and user migration strategies (bulk and lazy migration).
• Implement session management strategies, including refresh token rotation, session timeouts, and logout handling.
• Ensure secure coding practices and adherence to identity security standards.
• Build and manage Infrastructure as Code (IaC) using Terraform for Auth0 configurations.
• Contribute to CI/CD pipelines using GitHub and GitHub Actions for automated deployments.
• Implement logging, monitoring, error handling, and retry mechanisms for authentication workflows.
• Optimize authentication flows for performance and scalability in high-volume CIAM environments.
• Collaborate with Dev, DevOps, and architecture teams to embed identity into application design.
• Work on API gateway integrations and support secure secrets/configuration management.

Required Qualifications
• Strong hands-on experience with Auth0 CIAM platform.
• Strong hands-on experience with Terraform.
• Strong hands-on experience with ReactJS.
• Strong hands-on experience with GCP cloud.
• Deep expertise in OAuth 2.0, OpenID Connect (OIDC), PKCE, and SAML protocols.
• Experience designing and implementing authentication flows and federation integrations.
• Hands-on experience with Auth0 Actions, token customization, and claims mapping.
• Strong knowledge of MFA, adaptive authentication, and passwordless solutions.
• Experience integrating third-party services (e.g., Twilio for OTP/SMS).
• Strong experience with Terraform for Auth0 configuration management.
• Proficiency in ReactJS and Node.js (JavaScript/TypeScript).
• Experience with GitHub and GitHub Actions for CI/CD pipelines.
• Strong debugging, troubleshooting, and problem-solving skills.
• Solid understanding of API security (JWT, scopes, audience validation, token hardening).
• Mandatory Skills: IDAM - OKTA.

Preferred Qualifications
• Experience with mobile development and authentication (iOS/Android).
• Exposure to multi-tenant CIAM architecture and design patterns.
• Experience with cloud platforms such as AWS, GCP, or Azure.
• Exposure to authorization frameworks (e.g., OPA) or fine-grained access control models.

Certifications
• Auth0 certifications (e.g., Auth0 Certified Developer).