Engineer, IAM

Altice USA; Plano (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Altice USA is seeking an Identity & Access Management Engineer for the Customer IAM team in Plano, Texas. In this role, you will be responsible for configuring, integrating, and operating the enterprise Customer IDP platform, ensuring seamless customer experiences through modern authentication methods.

You will collaborate with development teams, manage identity data lifecycles, and oversee compliance with security policies. Ideal candidates should have a degree in Computer Science and experience in the IAM field, with skills in various programming languages.

Qualifications

• 3+ years of experience in Identity & Access Management, cybersecurity, or related field.
• Experience administering CIAM or identity provider platforms in production environments.
• Ability to write code or automation scripts in at least one modern language.

Responsibilities

• Administer and configure enterprise customer identity platform.
• Execute application migrations from legacy systems to CIAM solutions.
• Serve as a technical advisor to application development teams.

Skills

Identity & Access Management

Cybersecurity

Troubleshooting

Automation Scripting

Application Development Support

Education

Bachelor's degree in Computer Science or related field

Tools

JavaScript

Python

AWS

Azure

Terraform

Job description

Job Summary

As an Identity & Access Management Engineer on the Customer IAM team, you are a hands‑on practitioner responsible for the configuration, integration, and ongoing operations of our enterprise Customer IDP platform. You translate IAM strategy into working solutions, building authentication flows, provisioning connectors, and migration integrations that application teams across the company rely on every day.

You will work directly with application development teams to guide them through the adoption of modern authentication standards (OIDC, OAuth 2.0, SAML 2.0, FIDO2/WebAuthn), troubleshoot complex integration issues, and build the tooling and documentation that make a seamless customer experience possible. This role sits at the intersection of security engineering, platform operations, and developer experience.

Responsibilities

CIAM Platform Configuration & Operations

• Administer and configure the enterprise customer identity platform, including application integrations (OIDC, SAML), authentication policies, MFA, and network/security settings
• Manage identity data and lifecycle processes, including directory schema, attribute mappings, group rules, and automated provisioning/de‑provisioning (SCIM, workflows)
• Configure and maintain authorization services, including scopes, claims, and access policies aligned to application requirements
• Monitor platform health and security using logs and SIEM integrations; investigate issues and execute remediation based on established runbooks
• Maintain operational documentation, runbooks, and support materials for internal and customer‑facing teams

Authentication Integration & Migration

• Execute application migrations from legacy authentication systems to modern CIAM solutions using established playbooks
• Configure and validate authentication integrations (OIDC, SAML), ensuring secure and seamless end‑to‑end authentication experiences
• Test authentication and authorization flows across development, staging, and production environments, and coordinate issue resolution with application teams
• Support implementation of advanced authentication methods, including MFA and passwordless or phishing‑resistant mechanisms
• Track migration progress and contribute to reporting for application onboarding and modernization efforts

Developer Support & Enablement

• Serve as a technical advisor to application development teams integrating with the CIAM platform
• Provide guidance on authentication design, token usage, and session management aligned with identity standards
• Develop and maintain documentation, integration guides, and code samples to enable efficient onboarding
• Troubleshoot complex authentication and provisioning issues using system logs, browser diagnostics, and application insights
• Participate in architecture reviews and promote secure, standards‑based identity patterns
• Contribute to knowledge sharing through documentation, demos, and team enablement sessions

Security, Compliance & Continuous Improvement

• Implement and maintain authentication and access controls aligned to enterprise security policies and data sensitivity requirements
• Support audit and compliance activities (e.g., SOX, SOC 2, PCI‑DSS) including evidence collection and access reporting
• Participate in identity‑related incident response and contribute to root cause analysis and process improvement
• Maintain platform security hygiene, including policy reviews, removal of unused configurations, and credential/token management
• Build and enhance automation using scripting or Infrastructure‑as‑Code tools (e.g., Terraform) to improve consistency and reduce manual effort
• Contribute to CI/CD processes for identity configuration changes, including testing, peer review, and deployment
• Evaluate new platform capabilities and support proof‑of‑concept implementations for continuous improvement

Qualifications

Required

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent experience)
• 3+ years of experience in Identity & Access Management, cybersecurity, or a related technical field with hands‑on platform administration
• Experience administering CIAM or identity provider platforms in production environments, including authentication policies, integrations, and lifecycle management
• Working knowledge of identity standards and protocols such as OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM
• Experience troubleshooting authentication and provisioning issues using logs, browser tools, and diagnostic methods
• Ability to write code or automation scripts in at least one modern language (e.g., JavaScript, Python, Java, Go)
• Experience working with application development teams in a technical advisory or enablement capacity
• Familiarity with cloud platforms (AWS, Azure, or GCP) and identity integrations

We are an Equal Opportunity Employer committed to recruiting, hiring and promoting qualified people of all backgrounds regardless of gender, race, color, creed, national origin, religion, age, marital status, pregnancy, physical or mental disability, sexual orientation, gender identity, military or veteran status, or any other basis protected by federal, state, or local law.