Identity Engineer, Consultant (Auth0 / Customer Identity)

Releady; Denver (CO); Hybrid; USD 103,000 - 110,000; Full time

Job summary

Releady is partnering with a healthcare technology company to migrate its customer identity platform from Ping Identity to Auth0 (Okta). This hands-on role protects how members, providers, and partners sign in to health information, and you will own design through production cutover in a regulated environment.

The ideal candidate has 7+ years in IAM, 3+ years Auth0 administration, and a track record migrating identity platforms.

Qualifications

• 7+ years of IAM experience with CIAM focus.
• 3+ years Auth0 administration and implementation.
• Led IAM migrations (Ping to Auth0 or Okta).
• Strong knowledge of SAML, OAuth 2.0, OIDC, JWT, MFA.
• Healthcare/HIPAA-regulated experience preferred.
• Independent, methodical problem-solving; clear communicator.

Responsibilities

• Migrate customer identities from Ping to Auth0 with testing, cutover, and post-migration support.
• Build out Auth0 tenants, connections, applications, and login flows.
• Manage configuration as code via CI/CD and source control.

Skills

Identity & Access Management

Auth0 administration

CI/CD for identity

SAML / OAuth / OIDC / JWT

Ping Identity migration

HIPAA/regulatory knowledge

Stakeholder communication

Tools

PingFederate / PingAccess

Entra ID / Azure

PowerShell

Infrastructure as code

Job description

OVERVIEW

Releady is partnering with a healthcare technology company spun out of one of the nation's largest nonprofit health plans is seeking an Identity Engineer to help migrate its customer identity platform from Ping Identity to Auth0 (Okta). Every external, customer-facing portal runs through this platform, so this engineer will directly protect how members, providers, and partners sign in to their health information.

This is a hands-on role for an engineer who has already led identity migrations and can carry an idea from first design through production cutover. The right person brings deep knowledge of authentication, authorization, MFA, and browser security in large consumer (B2C) environments, works confidently in a regulated setting, and brings a point of view on how AI can accelerate identity engineering.

*Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $75–$80/hr
• Duration:6-month contract-to-hire
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

Migration & Platform Buildout

• Build out and configure Auth0 tenants, including connections, applications, and custom login flows.
• Plan and execute the migration of customer identities from Ping to Auth0, including testing, production cutover, and post-migration support.
• Manage configuration as code through CI/CD pipelines and source control.

Authentication, Security & Troubleshooting

• Design and maintain MFA, SSO, and federation using SAML, OAuth 2.0, OIDC, and JWT.
• Write and maintain Auth0 Actions, Rules, and Hooks to support custom authentication logic.
• Troubleshoot complex login, federation, and API integration issues across customer-facing applications.

Collaboration & Thought Leadership

• Onboard application teams to the new platform and partner with vendors and infrastructure teams to resolve identity issues.
• Recommend identity standards and best practices, including practical uses of AI in identity engineering.
• Document configurations, standards, and operational procedures.

QUALIFICATIONS

• 7+ years of Identity and Access Management experience, with deep B2C / customer identity (CIAM) experience.
• 3+ years of hands-on Auth0 administration and implementation.
• Proven experience leading identity platform migrations, ideally from Ping Identity to Auth0 or Okta.
• Strong command of SAML, OAuth 2.0, OIDC, JWT, MFA, federation, and browser security.
• Experience with user lifecycle management, API integrations, and CI/CD for identity configuration.
• Preferred: PingFederate/PingAccess, Entra ID, Azure, PowerShell or infrastructure-as-code, and healthcare or HIPAA-regulated experience.
• Works independently, troubleshoots methodically, and communicates clearly with many stakeholders.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.