Senior Identity and Access Management (IAM) Specialist
New
J
JobgetherIdentity and access management
Based in BrazilFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- At least five years of hands-on experience implementing and supporting large-scale enterprise Identity and Access Management (IAM) or Customer Identity and Access Management (CIAM) solutions; at least three years of experience in CIAM and authentication, identity orchestration, and API integration and scripting.
- Required Skills
- PythonJavascriptRESTful APIs
Requirements
- Have at least five years of hands-on experience implementing and supporting large-scale enterprise IAM or CIAM solutions.
- Have practical experience with one or more enterprise identity platforms, such as Ping Identity, ForgeRock, Okta, Auth0, Microsoft Entra ID, Keycloak, or CyberArk.
- Have at least three years of experience with CIAM concepts, adaptive authentication, RBAC and ABAC, SSO, MFA, and passwordless technologies including WebAuthn, FIDO2, and passkeys.
- Have at least three years of experience developing authentication journeys, authentication trees, and identity orchestration workflows, including web and mobile integrations through APIs and SDKs.
- Have at least three years of practical REST API experience and scripting experience with JavaScript, Groovy, or Python.
- Be experienced in manipulating payloads and tokens and integrating identity services with backend systems.
- Have strong practical knowledge of OAuth 2.0, OIDC, and SAML 2.0 in enterprise authentication and authorization scenarios.
- Be familiar with JWT, JWS, JWKS, secure token handling, and identity integration patterns.
- Be able to troubleshoot complex end-to-end issues across applications, API gateways, identity platforms, and downstream services.
- Strong preference is given to hands-on PingOne Advanced Identity Cloud implementation, configuration, and support experience.
- Practical experience with FAPI 2.0, PAR, RAR, mTLS, JWK-based Proof of Possession, and DCR is desirable.
- Be able to work effectively with architects and cross-functional teams, translate requirements into technical implementations, and document solutions clearly.
Responsibilities
- Build, configure, test, and validate the PingOne Advanced Identity Cloud environment and its enterprise, corporate, and partner integrations.
- Maintain the stability and availability of production identity integrations, provide advanced support, and implement improvements.
- Implement and troubleshoot adaptive onboarding and authentication journeys, passwordless login, MFA, SSO, account recovery, and delegated organization administration.
- Develop and maintain integrations using REST APIs, OIDC, OAuth 2.0, SAML 2.0, and SCIM 2.0.
- Implement advanced security mechanisms including FAPI 2.0, PAR, RAR, PKCE, mTLS, JWK-based Proof of Possession, and DCR.
- Design and maintain partner ecosystem integrations and emerging AI agent or MCP use cases using appropriate identity and security standards.
- Investigate and resolve complex integration issues across identity platforms, applications, API gateways, and downstream systems.
- Develop customized integrations and authentication workflows when native platform capabilities are insufficient.
- Collaborate with security, IAM, application, and infrastructure teams, and support architects with technical validation, prototyping, and proof-of-concept development.
- Maintain technical and as-built architecture documentation, integration specifications, configuration details, operational runbooks, and knowledge-transfer materials.
View Full Description & ApplyYou'll be redirected to the employer's site
