Senior CIAM Engineer – Secure Identity & Access Platform

AVP

Alpharetta (GA)

On-site

USD 140,000 - 180,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health insurance

Parental leave

401(k)

Incentive/bonus opportunity

Tuition reimbursement

Job summary

Zinnia is seeking a Senior Software Engineer to join the Enterprise API & CIAM team. You will extend and scale our production CIAM platform, building identity flows and authorization models across Zinnia Live, Market Connect, and TPA services.

You will collaborate with CIAM leads, product, and security partners to ensure secure integrations in a regulated insurance environment, with a focus on reliability, security, and scalable architectures.

Qualifications

6+ years of professional software development experience, including building and operating production services in the cloud (AWS preferred).
Hands-on experience implementing OAuth 2.0, OpenID Connect, and SAML, including federation with external identity providers.
Experience with a CIAM platform such as Auth0 (preferred), Okta, or PingOne.
Experience designing authorization systems beyond basic roles, such as attribute- or relationship-based models.
Strong backend skills in TypeScript/Node.js, or a comparable language, with solid fundamentals in API design, testing, and software design.
Working knowledge of CI/CD, infrastructure as code, containers, and monitoring and alerting.
Clear written and verbal communication, and the ability to work with engineers, product managers, and security partners across a distributed team.
Experience working in an Agile/Scrum environment.

Responsibilities

Build and evolve authentication flows, including workforce SSO federation (SAML/OIDC), passwordless login for agents and consumers, and machine-to-machine access for service integrations.
Design and implement fine-grained authorization that combines role-, attribute-, and relationship-based access control (RBAC, ABAC, ReBAC) to scope access by carrier, product, distributor, hierarchy, and delegation.
Build automated provisioning and lifecycle handling so access stays current as users are onboarded, transferred, given delegated access, or terminated.
Design, document, and maintain the CIAM APIs that other Zinnia teams consume.
Partner with product teams to onboard new applications onto our CIAM integration pattern.
Own the quality and reliability of what you ship through automated testing, code review, observability, and on-call participation.
Work with security and compliance teams to implement access controls, support audits, and keep every access decision logged and explainable.