Senior CIAM Engineer - Passwordless & SSO Lead

Cigna Health and Life Insurance Company; Connecticut; Hybrid; USD 125,000 - 208,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Life insurance

Tuition reimbursement

Paid time off

Paid holidays

Job summary

The Cigna Group is seeking a Senior CIAM Engineer to join our Identity Engineering team. You will design, build, and support secure customer identity solutions using Auth0 and Okta, integrating applications to modern identity platforms and enabling seamless SSO and MFA experiences across services.

You will automate identity workflows with Terraform, GitHub, GitOps, and CI/CD practices, helping move identity management to a scalable developer-friendly platform while safeguarding customer

Qualifications

• Hands-on experience implementing and supporting enterprise-scale Okta and/or Auth0 platforms.
• Strong knowledge of OAuth 2.0, OIDC, SAML, and SCIM.
• Strong experience with federation and Single Sign-On (SSO).
• Experience implementing and supporting Multi-Factor Authentication (MFA).
• Experience designing and deploying passwordless authentication solutions.
• Strong understanding of passkeys, FIDO2/WebAuthn, device-based authentication, and risk-based authentication.
• Experience supporting customer registration and account recovery journeys.
• Experience implementing Infrastructure as Code (IaC) with Terraform.
• Strong experience with GitHub, including Git workflows, pull requests, and code reviews.
• Experience with GitOps deployment models and CI/CD pipelines.
• Experience with monitoring and operational tools such as Splunk, ServiceNow, Jira, or similar platforms.
• Preferred Experience with Policy as Code and governance automation.
• Experience supporting customer identity platforms in regulated environments.
• Experience building self-service tools for developers and application onboarding.

Responsibilities

• Partner with application teams to design and build secure integrations with Auth0 and Okta.
• Lead application onboarding, including SSO, MFA, federation, and customer registration.
• Design, build, and support CIAM solutions for millions of customer identities.
• Build and manage identity infrastructure using Terraform, GitHub, and GitOps.
• Create reusable tools, modules, and automated processes to make application onboarding easier.
• Build and support passwordless authentication using passkeys, FIDO2, and WebAuthn.
• Configure authentication policies, adaptive access controls, MFA policies, and customer identity journeys.
• Build federation solutions using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and JWT.
• Work with security, architecture, and development teams to follow enterprise security standards.
• Troubleshoot complex authentication, authorization, identity, and federation issues.
• Support CI/CD pipelines and automated identity platform deployments.
• Help develop identity standards, reference architectures, and engineering best practices.
• Document solution designs, integration patterns, and operating procedures.
• Support modernization efforts focused on automation, self‑service capabilities, monitoring, and scalability.

Skills

CIAM design

Auth0/Okta

SSO

MFA

passwordless authentication

FIDO2/WebAuthn

OAuth 2.0

OIDC

SAML

SCIM

Terraform

GitHub

GitOps

CI/CD pipelines

Splunk/ITSM tools

Policy as Code

regulated environments

self-service tooling

Tools

Terraform

GitHub

GitOps

CI/CD

Splunk

ServiceNow

Jira

Job description

The Cigna Group is seeking a Senior CIAM Engineer to join our Identity Engineering team. You will design, build, and support secure customer identity solutions using Auth0 and Okta, integrating applications to modern identity platforms and enabling seamless SSO and MFA experiences across services.

You will automate identity workflows with Terraform, GitHub, GitOps, and CI/CD practices, helping move identity management to a scalable developer-friendly platform while safeguarding customer