Staff CIAM Software Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff CIAM Software Engineer based in United States . The Staff CIAM Software Engineer will help build the next generation of customer identity and authentication capabilities within a security-focused engineering organization. This hands-on role focuses on backend services that power registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B experiences. You will design and operate highly available identity services while applying strong security, reliability, and operational practices. The role offers the opportunity to shape identity architecture and integrate industry standards across web, mobile, and partner applications. You will collaborate closely with engineering, product, security, frontend, and mobile teams to deliver scalable identity experiences. You will also contribute to automation, infrastructure modernization, and the continuous improvement of identity platforms. This is a high-impact opportunity for an experienced engineer who enjoys solving complex distributed-systems and security challenges at scale. This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Staff CIAM Software Engineer based in United States . The Staff CIAM Software Engineer will help build the next generation of customer identity and authentication capabilities within a security-focused engineering organization. This hands-on role focuses on backend services that power registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B experiences. You will design and operate highly available identity services while applying strong security, reliability, and operational practices. The role offers the opportunity to shape identity architecture and integrate industry standards across web, mobile, and partner applications. You will collaborate closely with engineering, product, security, frontend, and mobile teams to deliver scalable identity experiences. You will also contribute to automation, infrastructure modernization, and the continuous improvement of identity platforms. This is a high-impact opportunity for an experienced engineer who enjoys solving complex distributed-systems and security challenges at scale. Accountabilities: Design, build, and operate core CIAM backend services supporting customer registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B platforms. Implement and extend identity standards including OAuth 2.0, OIDC, SAML, and SCIM while ensuring correctness, scalability, security, and clean integration patterns. Develop backend APIs and services using Python and Kotlin to expose identity capabilities to web, mobile, and partner applications. Integrate CIAM platforms with internal systems such as user data stores, messaging systems, fraud signals, and downstream customer platforms. Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent management, and adaptive authentication. Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD practices, treating identity capabilities as core platform services. Monitor, troubleshoot, and optimize identity services for performance, availability, resilience, observability, and abuse detection in high-scale environments. Define technical and execution plans for major features, system components, and the retirement of existing functionality. Establish and maintain high-quality, readable, maintainable code that can be effectively used and extended by other engineers. Work closely with global engineering, product, frontend, mobile, and security teams to deliver identity capabilities that meet both business and security requirements. Requirements: You have 7+ years of experience designing, developing, and launching backend systems at scale, with strong professional experience in Python, Kotlin, or a comparable backend language. You have a strong track record of building and operating highly available distributed systems using technologies such as AWS, MySQL, Spark, and Kubernetes. You have deep, hands-on experience designing and implementing CIAM systems and applying OAuth 2.0, OIDC, SAML, and SCIM beyond basic platform configuration. You have at least 5 years of professional backend software engineering experience and strong production experience with Python or a similar backend language. You have experience designing APIs, automation frameworks, distributed systems, and cloud-native services. You have hands-on experience building and maintaining CI/CD pipelines, GitHub-based development workflows, and Buildkite or comparable build systems. You have practical experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C through custom code, hooks, and APIs. You have a solid understanding of distributed-systems fundamentals, including API design, data modeling, latency, error handling, scalability, and observability. You have experience with Infrastructure as Code and automation tools such as Terraform, along with CI/CD pipelines for backend service deployment. You apply strong security engineering principles, including access control, token handling, encryption, MFA, privacy by design, and secure authentication patterns. You can define technical approaches for complex initiatives, execute independently, and produce high-quality code and systems that can be maintained by other engineers. You communicate clearly and collaborate effectively with global teams while taking ownership of backend identity services. Familiarity with Cursor or other AI-augmented development environments is beneficial. Benefits: The Canadian base salary range is $181,000–$241,000 per year, with compensation determined by factors such as location, experience, and job-related skills. The total compensation package may include equity rewards in addition to base pay. Employees may receive monthly stipends for health, wellness, technology, and other eligible expenses. Medical coverage is fully subsidized, with dental and vision coverage available for employees and their dependents. Flexible Spending Wallets provide allowances for technology, food, lifestyle needs, and family-forming expenses. Competitive vacation and holiday schedules support time away for rest and recharge. An employee stock purchase plan provides the opportunity to purchase company shares at a discount. The organization operates with a remote-first approach, with most roles offering the flexibility to work remotely within the country of employment. Reasonable accommodations are available to support an inclusive interview experience for candidates with disabilities. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1