Platform Security Engineer (IAM) - Remote Work | REF#297519

BairesDev; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

100% remote

Competitive USD pay

Hardware setup provided

Flexible hours

Parental leave

Paid vacations & holidays

Global, multicultural team

Mentorship and career growth

Job summary

BairesDev is seeking a Platform Security Engineer (IAM) to architect identity systems for our cloud-native platforms. You will serve as the technical authority on authentication and authorization across multi-tenant environments.

You will design and deploy enterprise authentication services with OAuth2, OIDC, and SAML; manage Auth0, Okta, or Cognito; enable SSO and federation; and collaborate with engineering to bake identity-first security into infrastructure.

Qualifications

• 4+ years of experience in Identity and Access Management (IAM) or Platform Security.
• Proficiency in authentication/authorization systems using OAuth2, OIDC, and SAML.
• Proficiency with identity platforms such as Auth0, Okta, or AWS Cognito.
• Experience with RBAC, ReBAC, and Zanzibar-inspired models.
• Advanced English proficiency.

Responsibilities

• Lead the design and deployment of enterprise authentication services based on OAuth2, OIDC, and SAML protocols.
• Build and maintain modern authorization systems using Zanzibar-inspired models to support high-scale, fine-grained permissions.
• Configure and integrate central identity providers like Auth0, Okta, or Cognito into distributed platform environments.
• Establish multi-tenant security architectures that enforce strict isolation between customer identities.
• Implement SSO and federation strategies to streamline access management across services and units.
• Collaborate with engineering teams to embed identity-first security into the core infrastructure lifecycle.

Skills

OAuth2

OIDC

SAML

RBAC

ReBAC

Zanzibar model

Multi-tenant security

Federation

Identity platforms

Tools

Auth0

Okta

AWS Cognito

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Platform Security Engineer (IAM) at BairesDev

As a Platform Security Engineer specialized in IAM, you will architect and implement the identity systems that form the security backbone of our cloud-native platforms. You will act as the technical authority for authentication and authorization strategies, ensuring robust protection across complex multi-tenant environments.

What You'll Do

• Lead the design and deployment of enterprise authentication services based on OAuth2, OIDC, and SAML protocols.
• Build and maintain modern authorization systems using Zanzibar-inspired models to support high-scale, fine-grained permissions.
• Configure and integrate central identity providers like Auth0, Okta, or Cognito into distributed platform environments.
• Establish multi-tenant security architectures that enforce strict isolation boundaries between different customer identities.
• Implement SSO and federation strategies to streamline access management across diverse services and organizational units.
• Collaborate with engineering teams to embed identity-first security principles into the core infrastructure lifecycle.

What We Are Looking For

• 4+ years of experience in Identity and Access Management (IAM) or Platform Security.
• Proven expertise in designing and implementing authentication and authorization systems using OAuth2, OIDC, and SAML.
• Proficiency in managing identity platforms such as Auth0, Okta, or AWS Cognito.
• Hands-on experience with modern authorization patterns, including RBAC, ReBAC, and Zanzibar-inspired models.
• Deep understanding of multi-tenant security architectures and identity federation.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.

Join a global team where your unique talents can truly thrive and make a significant impact!