Security Engineer (Identity) - Remote Work | REF#300069

BairesDev; United States; Remote; CLP 109,689,000 - 137,112,000; Full time

Benefits offered by this job

Remote work 100%

USD or local currency compensation

Home office setup provided

Flexible hours

Parental leave & holidays

Global, diverse team

Job summary

BairesDev is seeking an experienced Security Engineer (Identity) to design and implement identity systems securing access to our platforms. You will architect authentication/authorization for multi-tenant environments and collaborate with engineering to embed zero-trust security throughout the development lifecycle.

Join a global, 100% remote team delivering impactful projects and innovative identity solutions. Strong English and hands-on IAM expertise are essential for success.

Qualifications

• 4+ years in Security Engineering, Identity Management, or Cybersecurity.
• Experience implementing identity systems using OAuth2, OIDC, SAML, and JWT.
• Hands-on with identity platforms like Auth0, Okta, or AWS Cognito.
• Proficient in scalable IAM architectures and multi-tenant patterns.
• Knowledge of Zanzibar-inspired authorization models (e.g., SpiceDB/OpenFGA).
• Strong command of English (written and spoken).

Responsibilities

• Architect and deploy scalable identity systems with OAuth2, OIDC, and SAML.
• Design fine-grained authorization models and multi-tenant access controls.
• Lead integration of centralized identity providers across cloud-native ecosystems.
• Develop secure multi-tenant patterns ensuring data isolation.
• Collaborate with engineering to embed zero-trust principles in development lifecycle.
• Maintain identity lifecycle processes including federation, SSO, and JWT handling.

Skills

OAuth2

OIDC

SAML

JWT

IAM architectures

Multi-tenant patterns

Zanzibar-inspired models

English proficiency

Tools

Auth0

Okta

AWS Cognito

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Security Engineer (Identity) at BairesDev

As a Security Engineer specializing in Identity, you will design and implement the systems that govern how users and services securely access our platforms. You will act as the architect for authentication and authorization, ensuring that complex multi-tenant environments remain isolated and secure through modern identity standards.

What You'll Do

• Architect and deploy scalable identity systems utilizing protocols such as OAuth2, OIDC, and SAML to secure application access.
• Design and manage fine-grained authorization models, including RBAC and Zanzibar-inspired patterns, to ensure precise resource control.
• Lead the integration of centralized identity providers like Auth0, Okta, or Cognito across distributed cloud-native ecosystems.
• Develop secure multi-tenant patterns to maintain strict data isolation and prevent unauthorized cross-tenant access.
• Collaborate with engineering teams to embed identity-first security principles and zero-trust architectures into the development lifecycle.
• Maintain and optimize identity lifecycle processes, including federation, SSO, and secure JWT handling, to support high-scale operations.

What We Are Looking For

• 4+ years of experience in Security Engineering, Identity Management, or Cybersecurity.
• Proven expertise in implementing identity systems using OAuth2, OIDC, SAML, and JWT.
• Hands-on experience with identity platforms such as Auth0, Okta, or AWS Cognito.
• Proficiency in designing scalable IAM architectures and multi-tenant authorization patterns.
• Strong understanding of Zanzibar-inspired authorization models like SpiceDB or OpenFGA.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!