Senior CIAM Engineer: Secure Identity & Access Control

Zinnia; Alpharetta (GA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Parental leave

401(k)

Bonus opportunity

Tuition reimbursement

Job summary

Zinnia is seeking a Senior Software Engineer to join the Enterprise API & CIAM team in Alpharetta, GA. You9ll help expand a production CIAM platform handling authentication and fine-grained authorization for carriers, distributors, agents, policyholders, and integrations.

You will design flows, provisioning, and CIAM APIs, partnering with product, security, and compliance in a regulated insurance environment.

Qualifications

• 6+ years of professional software development experience, including building/operating production services in the cloud (AWS preferred).
• Hands-on experience implementing OAuth 2.0, OpenID Connect, and SAML, including federation with external identity providers.
• Experience with a CIAM platform such as Auth0 (preferred), Okta, or PingOne.
• Experience designing authorization systems beyond basic roles (attribute- or relationship-based models).
• Strong backend skills in TypeScript/Node.js, with solid API design, testing, and software design fundamentals.
• Working knowledge of CI/CD, infrastructure as code, containers, and monitoring/alerting.
• Clear written and verbal communication, and ability to work across distributed teams.
• Experience in an Agile/Scrum environment.

Responsibilities

• Build and evolve authentication flows (SSO federation, passwordless login, machine-to-machine access).
• Design and implement fine-grained authorization (RBAC/ABAC/REBAC) across carriers, products, distributors, and hierarchies.
• Build automated provisioning and lifecycle handling for onboarding, transfers, delegated access, and terminations.
• Design, document, and maintain CIAM APIs used by other teams.
• Partner with product teams to onboard new apps onto CIAM integration patterns.
• Own quality and reliability through automated testing, code review, observability, and on-call participation.
• Collaborate with security/compliance to implement access controls and support audits.

Skills

OAuth/OIDC/SAML

TypeScript/Node.js

CIAM platforms

RBAC/ABAC/REBAC

AWS

OpenFGA

Kafka

Terraform

Tools

Auth0

Okta

PingOne

Kong

MongoDB

Job description

Zinnia is seeking a Senior Software Engineer to join the Enterprise API & CIAM team in Alpharetta, GA. You9ll help expand a production CIAM platform handling authentication and fine-grained authorization for carriers, distributors, agents, policyholders, and integrations.

You will design flows, provisioning, and CIAM APIs, partnering with product, security, and compliance in a regulated insurance environment.