Remote IAM Engineer — Design Secure Access at Scale

BairesDev; Veracruz; Presencial; MXN 1.531.000 - 2.212.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

USD or local currency compensation

Hardware and software setup for home

Flexible hours

Parental leaves and holidays

Global, multicultural team

Descripción de la vacante

BairesDev is seeking an IAM Engineer to design and maintain identity and access systems that scale across multi-tenant environments. You will bridge security protocols with seamless user experiences, ensuring robust authentication and authorization worldwide.

This 100% remote role requires implementing OAuth2, OIDC, SAML, JWT, and managing Auth0, Okta, or Cognito, while advancing RBAC, ReBAC, and federation patterns across applications.

Formación

• 4+ years of IAM, cybersecurity, or systems engineering experience.
• Proven design/implementation experience with OAuth2, OIDC, SAML, JWT.
• Hands-on IAM platforms such as Auth0, Okta, or AWS Cognito.
• Proficiency in RBAC, ReBAC, Zanzibar-inspired patterns like SpiceDB or OpenFGA.
• Strong ability to automate IAM workflows and enable SSO/federation.
• Advanced English proficiency.

Responsabilidades

• Design and implement scalable identity solutions using OAuth2, OIDC, and SAML.
• Manage IAM platforms such as Auth0, Okta, or Cognito for centralized authentication.
• Architect fine-grained authorization models including RBAC, ReBAC, Zanzibar-inspired patterns.
• Streamline identity lifecycles and automate SSO across global apps.
• Collaborate with engineering to enforce security standards for identity data and tokens.

Conocimientos

IAM

OAuth2

OIDC

SAML

JWT

Auth0

Okta

Cognito

RBAC

ReBAC

SpiceDB

OpenFGA

SSO

Federation

English

Herramientas

Auth0

Okta

AWS Cognito

Descripción del empleo

BairesDev is seeking an IAM Engineer to design and maintain identity and access systems that scale across multi-tenant environments. You will bridge security protocols with seamless user experiences, ensuring robust authentication and authorization worldwide.

This 100% remote role requires implementing OAuth2, OIDC, SAML, JWT, and managing Auth0, Okta, or Cognito, while advancing RBAC, ReBAC, and federation patterns across applications.