Staff CIAM Engineer - Identity & Access Management

Triwill Group; New York (NY); Hybrid; USD 211,000 - 254,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Employee stock purchase program

Equity and discretionary bonus

Job summary

Fastly is seeking a Staff Software Engineer for CIAM to design and operate authentication/authorization systems, scale identity services, and drive architectural decisions across teams. You will mentor engineers and shape security patterns while collaborating with product and security to deliver robust identity solutions.

This role requires 7+ years in CIAM or related areas, deep knowledge of OIDC, OAuth, SAML, SCIM, JWT, and SSO, and a track record in distributed systems.

Qualifications

• Significant experience designing and operating authentication/authorization in production.
• Strong understanding of identity standards (OIDC, OAuth, SAML, JWT, SSO).
• Ability to lead multi-team architectural initiatives and drive delivery.
• Excellent written and verbal communication for technical audiences.

Responsibilities

• Design and operate secure, scalable CIAM identity services.
• Lead architecture decisions and guide design reviews across teams.
• Partner with product, security, and engineering to plan implementations.
• Mentor engineers and promote engineering best practices.
• Support on-call rotations and ensure reliability of identity services.

Skills

7+ years experience

OIDC/OAuth/SAML/SCIM/JWT/SSO

Distributed systems security

Technical leadership

Communication skills

Tools

Keycloak

Go

Java

Job description

Fastly is seeking a Staff Software Engineer for CIAM to design and operate authentication/authorization systems, scale identity services, and drive architectural decisions across teams. You will mentor engineers and shape security patterns while collaborating with product and security to deliver robust identity solutions.

This role requires 7+ years in CIAM or related areas, deep knowledge of OIDC, OAuth, SAML, SCIM, JWT, and SSO, and a track record in distributed systems.