Identity Engineer, Senior (Auth0 / Customer Identity)

Releady; United States; Hybrid; USD 103,000 - 110,000; Full time

Job summary

Releady, a healthcare technology company, is seeking an Identity Engineer to migrate its customer identity platform from Ping Identity to Auth0 (Okta). This role will lead migration efforts, design secure login flows, and enforce MFA across large consumer environments in a regulated healthcare setting.

You will build Auth0 tenants, orchestrate testing and cutover, and implement identity security across member, provider, and partner portals, leveraging CI/CD for rapid, reliable delivery.

Qualifications

• 7+ years in Identity and Access Management, CIAM experience.
• 3+ years hands-on Auth0 administration and implementation.
• Proven experience leading identity platform migrations, ideally Ping Identity to Auth0 or Okta.
• Strong command of SAML, OAuth 2.0, OIDC, JWT, MFA, federation, and browser security.
• Experience with user lifecycle management, API integrations, and CI/CD for identity configuration.
• Preferred: healthcare or HIPAA-regulated experience.

Responsibilities

• Build out and configure Auth0 tenants, including connections, applications, and custom login flows.
• Plan and execute the migration of customer identities from Ping to Auth0, including testing, production cutover, and post-migration support.
• Manage configuration as code through CI/CD pipelines and source control.

Skills

Identity & Access Management

CIAM / B2C

Auth0 administration

Ping Identity experience

SAML / OAuth / OIDC

MFA & Federation

Tools

Auth0

Ping Identity

Okta

PingFederate

PingAccess

Azure

Job description

OVERVIEW

Releady is partnering with a healthcare technology company spun out of one of the nation's largest nonprofit health plans is seeking an Identity Engineer to help migrate its customer identity platform from Ping Identity to Auth0 (Okta). Every external, customer-facing portal runs through this platform, so this engineer will directly protect how members, providers, and partners sign in to their health information.

This is a hands-on role for an engineer who has already led identity migrations and can carry an idea from first design through production cutover. The right person brings deep knowledge of authentication, authorization, MFA, and browser security in large consumer (B2C) environments, works confidently in a regulated setting, and brings a point of view on how AI can accelerate identity engineering.

*Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $75–$80/hr
• Duration:6-month contract-to-hire
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

Migration & Platform Buildout

• Build out and configure Auth0 tenants, including connections, applications, and custom login flows.
• Plan and execute the migration of customer identities from Ping to Auth0, including testing, production cutover, and post-migration support.
• Manage configuration as code through CI/CD pipelines and source control.

Authentication, Security & Troubleshooting

• Design and maintain MFA, SSO, and federation using SAML, OAuth 2.0, OIDC, and JWT.
• Write and maintain Auth0 Actions, Rules, and Hooks to support custom authentication logic.
• Troubleshoot complex login, federation, and API integration issues across customer-facing applications.

Collaboration & Thought Leadership

• Onboard application teams to the new platform and partner with vendors and infrastructure teams to resolve identity issues.
• Recommend identity standards and best practices, including practical uses of AI in identity engineering.
• Document configurations, standards, and operational procedures.

QUALIFICATIONS

• 7+ years of Identity and Access Management experience, with deep B2C / customer identity (CIAM) experience.
• 3+ years of hands-on Auth0 administration and implementation.
• Proven experience leading identity platform migrations, ideally from Ping Identity to Auth0 or Okta.
• Strong command of SAML, OAuth 2.0, OIDC, JWT, MFA, federation, and browser security.
• Experience with user lifecycle management, API integrations, and CI/CD for identity configuration.
• Preferred: PingFederate/PingAccess, Entra ID, Azure, PowerShell or infrastructure-as-code, and healthcare or HIPAA-regulated experience.
• Works independently, troubleshoots methodically, and communicates clearly with many stakeholders.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.