Remote Platform Security Engineer - IAM & SSO

BairesDev; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

100% remote

Competitive USD pay

Hardware setup provided

Flexible hours

Parental leave

Paid vacations & holidays

Global, multicultural team

Mentorship and career growth

Job summary

BairesDev is seeking a Platform Security Engineer (IAM) to architect identity systems for our cloud-native platforms. You will serve as the technical authority on authentication and authorization across multi-tenant environments.

You will design and deploy enterprise authentication services with OAuth2, OIDC, and SAML; manage Auth0, Okta, or Cognito; enable SSO and federation; and collaborate with engineering to bake identity-first security into infrastructure.

Qualifications

• 4+ years of experience in Identity and Access Management (IAM) or Platform Security.
• Proficiency in authentication/authorization systems using OAuth2, OIDC, and SAML.
• Proficiency with identity platforms such as Auth0, Okta, or AWS Cognito.
• Experience with RBAC, ReBAC, and Zanzibar-inspired models.
• Advanced English proficiency.

Responsibilities

• Lead the design and deployment of enterprise authentication services based on OAuth2, OIDC, and SAML protocols.
• Build and maintain modern authorization systems using Zanzibar-inspired models to support high-scale, fine-grained permissions.
• Configure and integrate central identity providers like Auth0, Okta, or Cognito into distributed platform environments.
• Establish multi-tenant security architectures that enforce strict isolation between customer identities.
• Implement SSO and federation strategies to streamline access management across services and units.
• Collaborate with engineering teams to embed identity-first security into the core infrastructure lifecycle.

Skills

OAuth2

OIDC

SAML

RBAC

ReBAC

Zanzibar model

Multi-tenant security

Federation

Identity platforms

Tools

Auth0

Okta

AWS Cognito

Job description

BairesDev is seeking a Platform Security Engineer (IAM) to architect identity systems for our cloud-native platforms. You will serve as the technical authority on authentication and authorization across multi-tenant environments.

You will design and deploy enterprise authentication services with OAuth2, OIDC, and SAML; manage Auth0, Okta, or Cognito; enable SSO and federation; and collaborate with engineering to bake identity-first security into infrastructure.