CIAM Engineer: Build Secure Customer Identities & Access

Avacone; Basel; Presencial; CHF 120 000 - 170 000; Tempo integral

Resumo da oferta

Avacone, Basel-based, is seeking a CIAM Engineer to design, build, and operate secure customer identity and access management services for web and mobile apps. You will help users register, sign in, recover accounts, and manage their security settings.

You will collaborate with product, application engineering, security, privacy, and platform teams to balance security, usability, and operational reliability across the customer identity lifecycle.

Qualificações

• Hands-on production experience with customer-facing identity or authentication services.
• Practical experience with at least one CIAM platform (Auth0, Ping Identity, Entra, or Cognito).
• Strong OAuth 2.0 and OpenID Connect understanding including PKCE and session management.
• Experience with MFA, account recovery and federation; troubleshoot auth across apps and APIs.
• Proficient in at least one backend language (Java, C#, TS, Python, Go).
• Experience with CI/CD and production troubleshooting using logs and metrics.
• Ability to explain security and user experience trade-offs clearly to technical and non-technical stakeholders.

Responsabilidades

• Design and implement customer identity journeys (registration, MFA, recovery, deletion).
• Integrate web and mobile apps with CIAM platforms using OIDC, OAuth 2.0, and SAML 2.0.
• Configure and maintain authentication policies, federation connections, identity flows, and session/token settings.
• Implement controls against account takeover, credential stuffing, and automated abuse; enhance authentication as needed.
• Build automated tests and deployment pipelines for identity services and platform configuration; support safe rollouts/rollbacks.
• Monitor authentication availability, latency, and success rates; investigate production incidents.
• Collaborate with security and privacy teams on data minimization, retention, and deletion.
• Maintain technical documentation, integration guides, and runbooks for CIAM users.

Conhecimentos

CIAM experience

OAuth 2.0 / OIDC knowledge

MFA implementation

Federation & SSO knowledge

Backend programming languages

CI/CD / production troubleshooting

Security vs UX trade-offs

Ferramentas

Auth0

Ping Identity

Microsoft Entra External ID

AWS Cognito

OIDC tooling

SAML 2.0 tooling

Descrição da oferta de emprego

Avacone, Basel-based, is seeking a CIAM Engineer to design, build, and operate secure customer identity and access management services for web and mobile apps. You will help users register, sign in, recover accounts, and manage their security settings.

You will collaborate with product, application engineering, security, privacy, and platform teams to balance security, usability, and operational reliability across the customer identity lifecycle.