DevOps Security Engineer – Customer IAM
Your role
We’re looking for a hands-on Security DevOps Engineer to support our
Customer Identity & Access Management
platform, helping us securely deliver and scale authentication services for internet-facing applications that serve millions of users. This role sits at the intersection of DevOps, platform security, and CIAM—focused on automating secure deployments and protecting public-facing APIs and services.
- Partner with Senior SMEs in and outside CIAM Team to successfully execute and deliver the vision and priorities of your POD.
- Contribute to the CIAM technical vision and strategy and support the development of architecture and engineering capabilities within the team
- Act as individual contributor for the delivery of your POD, ensuring that services are implemented, delivered and operated at the required quality standards.
Your team
You'll be working in the Customer Identity & Access Management Team which is part of Identity & Access Management. This role specifically is aligned with our External Authentication products which provide solutions for clients globally. Our team consists of highly skilled technical experts across the globe. Your team has an amazing opportunity to make significant positive impact to the company, our clients and our stakeholders.
Your expertise
- CIAM Deployment & Operations
- Build and operate highly available CIAM infrastructure and applications using IaC.
- Automate the deployment and configuration of identity services (e.g., Transmit Security, Azure AD B2C, Auth0, ForgeRock, etc.).
- Integrate reverse proxies, WAFs (e.g., F5, Azure Front Door), and API gateways for internet-facing identity endpoints.
- Deploy and manage secure CIAM workloads in Azure (App Services, Kubernetes, Azure Functions, Key Vault, App Gateway).
- Security Engineering & Hardening
- Implement and enforce secure defaults for CIAM components (e.g., rate limiting, MFA enforcement, token protection).
- Automate secrets management and certificate rotation for CIAM services and dependencies.
- Integrate identity protection signals (risk-based access, fraud detection) with application workflows.
- Monitor infrastructure using native and bespoke tools and building custom dashboards for Engineering and Operations duties.
- DevOps & CI/CD
- Harden CI/CD pipelines for CIAM service delivery, including shift-left security scanning.
- Create reusable deployment patterns and modules for secure multi-region or multi-tenant CIAM deployments.
- Support developers in securely integrating with OAuth2, OIDC, SAML, and federation patterns.
- Collaboration & Incident Support
- Participate in security reviews for new customer-facing features or identity integrations.
- Act as an SME in CIAM-related incident response and postmortem analysis.
- Collaborate with product, development, and compliance teams to align on secure identity practices.
Required Qualifications
- 8+ years in DevOps, Cloud Engineering, or Platform Security roles, ideally with CIAM experience.
- Hands-on experience with public cloud deployments (Azure preferred) and CI/CD automation.
- Deep understanding of internet-facing app security: TLS, WAFs, reverse proxies, JWT/OAuth token handling.
- Strong experience with infrastructure as code and scripting (Python, PowerShell, Bash).
- Familiarity with modern identity standards (OAuth2, OIDC, SAML) and threat models.
- Experience managing authentication and authorization services at scale for external users.
Preferred Qualifications
- Experience with CIAM platforms like Transmit, ForgeRock, Auth0, Ping, or Azure AD B2C.
- Understanding of Zero Trust architectures.
- Familiarity with DDoS mitigation and secure web gateway integration.
- Exposure to cloud-native observability stacks and runtime security.
Azure and IT security certifications.
