Identity Engineer, Senior (Auth0 / Customer Identity) - Hybrid

Releady; San Francisco (CA); Hybrid; USD 103,000 - 117,000; Full time

Job summary

Releady is seeking an Identity Engineer to migrate its customer identity platform from Ping Identity to Auth0 (Okta). The role covers design through production cutover, with a focus on authentication, MFA, and browser security in a large consumer environment.

The position is contract-to-hire for six months, hybrid work with 2x/week onsite in the SF Bay Area, and offers $75–$85 per hour. Must be able to work in the United States without sponsorship.

Qualifications

• 7+ years of Identity and Access Management experience, with deep CIAM experience.
• 3+ years of hands-on Auth0 administration and implementation.
• Proven experience leading identity platform migrations, ideally Ping -> Auth0 or Okta.
• Strong command of SAML, OAuth 2.0, OIDC, JWT, MFA, federation, and browser security.

Responsibilities

• Migrate customer identities from Ping Identity to Auth0, including testing, cutover, and post-migration support.
• Build out Auth0 tenants, including connections, apps, and login flows.
• Manage identity configurations through CI/CD pipelines and source control.

Skills

IAM expert

Auth0 admin

Migration leadership

SAML/OIDC/OAuth 2.0

MFA & federation

CI/CD for IAM

Healthcare/HIPAA domain

Tools

CI/CD tooling

IaC

Job description

OVERVIEW

Releady is partnering with a healthcare technology company spun out of one of the nation's largest nonprofit health plans is seeking an Identity Engineer to help migrate its customer identity platform from Ping Identity to Auth0 (Okta). Every external, customer-facing portal runs through this platform, so this engineer will directly protect how members, providers, and partners sign in to their health information.

This is a hands-on role for an engineer who has already led identity migrations and can carry an idea from first design through production cutover. The right person brings deep knowledge of authentication, authorization, MFA, and browser security in large consumer (B2C) environments, works confidently in a regulated setting, and brings a point of view on how AI can accelerate identity engineering.

NOTE: Must be able to work in the United States without sponsorship. Not eligible for C2C

Employment Type:Contract-to-Hire (six-month contract term)

Location: Hybrid — 2x/week onsite; San Diego, Long Beach, Sacramento, Rancho Cordova, or Oakland (SF Bay Area)

Compensation: $75 – $85/hr

RESPONSIBILITIES

Migration & Platform Buildout

• Build out and configure Auth0 tenants, including connections, applications, and custom login flows.
• Plan and execute the migration of customer identities from Ping to Auth0, including testing, production cutover, and post-migration support.
• Manage configuration as code through CI/CD pipelines and source control.

Authentication, Security & Troubleshooting

• Design and maintain MFA, SSO, and federation using SAML, OAuth 2.0, OIDC, and JWT.
• Write and maintain Auth0 Actions, Rules, and Hooks to support custom authentication logic.
• Troubleshoot complex login, federation, and API integration issues across customer-facing applications.

Collaboration & Thought Leadership

• Onboard application teams to the new platform and partner with vendors and infrastructure teams to resolve identity issues.
• Recommend identity standards and best practices, including practical uses of AI in identity engineering.
• Document configurations, standards, and operational procedures.

QUALIFICATIONS

• 7+ years of Identity and Access Management experience, with deep B2C / customer identity (CIAM) experience.
• 3+ years of hands-on Auth0 administration and implementation.
• Proven experience leading identity platform migrations, ideally from Ping Identity to Auth0 or Okta.
• Strong command of SAML, OAuth 2.0, OIDC, JWT, MFA, federation, and browser security.
• Experience with user lifecycle management, API integrations, and CI/CD for identity configuration.
• Preferred: PingFederate/PingAccess, Entra ID, Azure, PowerShell or infrastructure-as-code, and healthcare or HIPAA-regulated experience.
• Works independently, troubleshoots methodically, and communicates clearly with many stakeholders.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.