Senior Security Engineer, CIAM

Job Title-Senior Security Engineer, CIAM

Position Overview This role is designed as a modern CIAM platform engineering position focused on securing and automating customer identity services using Auth0. Market direction in 2025-2026 shows that CIAM is increasingly treated as a customer trust, fraud prevention, and digital experience capability rather than only a login administration function. The position requires deep hands-on engineering experience with Auth0, Infrastructure as Code using Terraform, and practical AI security capability. The combination reflects current expectations that identity engineers deliver secure customer identity services through automation, CI/CD workflows, and modern detection and response practices.

Job Summary Seeking a highly skilled Security Engineer, CIAM Platform to design, automate, and secure the customer identity platform. This role owns the implementation and operation of CIAM capabilities using Auth0, with full Infrastructure as Code management through Terraform, secure CI/CD practices, and AI-aware security controls to address modern identity threats and customer experience requirements. The successful candidate combines hands-on Auth0 engineering, strong automation and scripting skills, and practical AI security knowledge to improve authentication security, reduce fraud and account takeover risk, and support scalable identity delivery across environments.

Key Responsibilities

• Design, implement, and operate CIAM solutions on Auth0 across development, test, and production environments.
• Manage Auth0 configuration as code using Terraform, including applications, connections, actions, triggers, and environment-specific settings.
• Build and maintain secure deployment workflows for Auth0 using CI/CD and Git-based change management.
• Define and enforce authentication and authorization controls, including OAuth 2.0, OpenID Connect, MFA, passwordless, and step-up authentication.
• Improve login, registration, account recovery, consent, and profile-management journeys while minimizing friction and maintaining strong security.
• Monitor CIAM telemetry for abuse, anomalies, account takeover attempts, bot activity, and fraudulent sign-up patterns.
• Partner with application, cloud, and security teams to integrate CIAM with downstream services, APIs, SIEM, SOAR, and fraud/security tooling.
• Support identity risk and AI security use cases, including secure identity patterns for AI agents, AI-assisted anomaly detection, and threat response workflows.
• Conduct security reviews, configuration audits, and access-control assessments for CIAM implementations.
• Maintain technical documentation, standards, and reusable Terraform modules for Auth0 platform governance.

Required Qualifications

• 4-7 years of experience in IAM or CIAM, with strong hands-on experience in customer identity engineering.
• Demonstrated production experience administering and engineering Auth0.
• Strong Terraform experience, including managing Auth0 infrastructure and configuration as code.
• Practical knowledge of OAuth 2.0, OpenID Connect, SAML, JWTs, session management, MFA, and account lifecycle controls.
• Experience designing secure CI/CD workflows for identity platform changes.
• Strong scripting or development skills in Python, JavaScript, PowerShell, or similar.
• Working knowledge of cloud platforms such as AWS or Azure and their identity and security services.
• Practical AI skill in one or more of the following: AI-assisted threat detection, AI workflow security, identity risk analytics, abuse detection, or secure use of AI in security operations.
• Strong analytical, troubleshooting, and stakeholder communication skills.
• Ability to operate independently in a fast-moving, cross-functional environment.

Preferred Qualifications

• Experience with Auth0 Actions, extensibility patterns, and tenant automation at scale.
• Experience with passkeys, passwordless login, phishing-resistant authentication, and risk-based authentication.
• Experience with bot mitigation, fraud detection, and account takeover prevention.
• Familiarity with privacy, consent, and data protection requirements such as GDPR, ISO 27001, and PCI DSS.
• Knowledge of CIAM observability, identity threat detection, and integration with SIEM, SOAR, or XDR tooling.
• Relevant certifications such as CISSP, CISM, or identity/security-related certifications.