CIAM Engineer: Identity & Access Automation

Optimum; Bethpage (NY); On-site; USD 84,000 - 137,000; Full time

Job summary

Optimum is seeking an Identity & Access Management Engineer to manage and evolve our CIAM platform, integrating OIDC and SAML, defining access policies, and coordinating with application teams across the enterprise.

You will implement modern authentication standards, contribute to tooling and documentation, and ensure secure, scalable identity experiences for customers and partners. This role blends security engineering with platform operations.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent experience)
• 3+ years in Identity & Access Management or related technical field with hands-on platform administration
• Experience administering CIAM or identity provider platforms in production environments
• Knowledge of OAuth 2.0, OpenID Connect, SAML, and SCIM
• Experience advising application development teams in a technical capacity
• Familiarity with cloud platforms (AWS/Azure/GCP) and identity integrations

Responsibilities

• Configure and operate enterprise CIAM platform including OIDC/SAML integrations
• Manage identity data lifecycle: schema, mappings, group rules, provisioning
• Configure authorization services: scopes, claims, access policies
• Monitor platform health and security; runbooks and remediation
• Develop documentation, integration guides, and samples for onboarding
• Lead migrations from legacy auth systems to CIAM solutions
• Support MFA and passwordless authentication strategies
• Collaborate with development teams to drive secure design and patterns

Skills

CIAM strategy

OIDC

SAML

OAuth 2.0

SCIM

MFA

FIDO2/WebAuthn

Cloud platforms

CI/CD

Documentation

Education

Bachelor’s degree or equivalent

Tools

AWS

Azure

GCP

Terraform

Job description

Optimum is seeking an Identity & Access Management Engineer to manage and evolve our CIAM platform, integrating OIDC and SAML, defining access policies, and coordinating with application teams across the enterprise.

You will implement modern authentication standards, contribute to tooling and documentation, and ensure secure, scalable identity experiences for customers and partners. This role blends security engineering with platform operations.