Remote IAM Token Service Engineer

VSO Inc.; United States; Remoto; USD 120.000 - 165.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health benefits

Flexible work arrangements

Career development opportunities

Descrizione del lavoro

VSO Inc. is seeking an experienced Security Token Service Engineer (IAM Engineer) to design, develop, and operate secure authentication and authorization services for a enterprise-wide platform modernization.

The role emphasizes token management, federation, and API security in a production environment. The ideal candidate will implement OAuth 2.0, OIDC, and SAML 2.0, manage credentials and PKI, and collaborate with platform and cybersecurity teams to deliver reusable identity services across

Competenze

• Bachelor's degree or equivalent in CS, cybersecurity, software engineering, or related field.
• Minimum of 3 years hands-on IAM engineering experience.
• Experience implementing OAuth 2.0, OpenID Connect, and SAML 2.0 authentication and federation flows.
• Hands-on experience with token exchange, JWT validation, and token-based authentication.
• Experience integrating at least one enterprise identity provider (e.g., Microsoft Entra ID, ADFS, SiteMinder) and Keycloak as an identity broker.
• Proficiency with PKI, X.509 certificates, and TLS/mTLS; strong backend development with Java/Go/Python.

Mansioni

• Design, develop, implement, and maintain authentication and authorization services for enterprise apps and APIs.
• Build and operate token services for issuance, exchange, validation, revocation, and introspection.
• Implement secure auth flows using OAuth 2.0, OIDC, and SAML 2.0; develop JWT validation and token management.
• Integrate identity providers and establish secure federation and SSO across apps and services.
• Configure and manage Keycloak realms, clients, providers, and protocol mappings.
• Document identity architectures, flows, and security models; support security reviews and audits.

Conoscenze

IAM engineering

Authentication design

Troubleshooting

Formazione

Bachelor's degree or equivalent

Strumenti

OAuth 2.0

OIDC

SAML 2.0

JWT

Keycloak

TLS/mTLS

PKI

Descrizione del lavoro

VSO Inc. is seeking an experienced Security Token Service Engineer (IAM Engineer) to design, develop, and operate secure authentication and authorization services for a enterprise-wide platform modernization.

The role emphasizes token management, federation, and API security in a production environment. The ideal candidate will implement OAuth 2.0, OIDC, and SAML 2.0, manage credentials and PKI, and collaborate with platform and cybersecurity teams to deliver reusable identity services across