CIAM Software Engineer

IDEXX•Westbrook, ME

6d•Hybrid

About The Position

The Software Engineer, CIAM plays a critical role in delivering secure, scalable, and resilient customer identity experiences across IDEXX’s customer-facing platforms. This role provides hands-on engineering leadership and technical ownership of the Auth0-based Customer Identity and Access Management (CIAM) platform. This individual will work closely with a Product Manager (roadmap alignment, prioritization, business value), Business Systems Analyst (translate strategy into clear, execution-ready requirements and aligned workflows), Delivery Lead (planning, sprint execution, impediment removal), Security Architecture (standards, risk mitigation, compliance), and Engineering teams (design, integration, troubleshooting, deployment). The role acts as a technical authority for Auth0, helping define standards, integration patterns, and operational practices that enable product teams to adopt CIAM capabilities with confidence. This position blends deep software engineering expertise with a platform mindset—balancing feature delivery (e.g., federation, SSO, onboarding flows) with long-term platform stability, security, and operability. IDEXX is standardizing all customer-facing applications onto a unified CIAM platform powered by Auth0. Today, a growing number of applications authenticate through Auth0, with continued expansion underway. Your Location: We are looking for driving distance to our Westbrook, Maine HQ with only 8 days on-site required per month. We are also open to regionally based candidates in Massachusetts and NH that can come in but maybe less frequently.

Requirements

Experience with Customer Identity and Access Management platforms (Auth0 strongly preferred)
Familiarity with OAuth 2.0, OIDC, and SAML authentication flows
Experience supporting customer-facing platforms in regulated, high-availability, or security-sensitive environments
Programming & APIs: Strong experience with Node.js and TypeScript / JavaScript
Experience building and maintaining APIs (authentication, identity services, etc.)
Experience customizing authentication workflows (rules, actions, hooks, etc.)
Cloud & Infrastructure (Preferably AWS)
API Gateway
IAM
RDS / DynamoDB
Infrastructure as Code (SAM, CloudFormation, CDK)
Data & DevOps: Experience with user data management and identity data flows.
Familiarity with DevOps practices and CI/CD pipelines.
Experience with GitHub or similar version control systems
Strong communication and collaboration skills across engineering teams
Ability to manage competing priorities across multiple stakeholders
Comfortable operating in a highly cross-functional, matrixed environment
Ability to balance hands-on technical work with coordination and planning responsibilities
Adaptability in a rapidly growing platform with increasing demand

Nice To Haves

Experience working with multiple CIAM or identity platforms (e.g., Auth0, Cognito, Okta, etc.)
Experience supporting large-scale identity systems (100K+ users)
Experience in distributed, multi-team environments with shared platforms
Familiarity with cloud-native architectures and microservices

Responsibilities

Design, build, and maintain integrations between Auth0 and customer-facing service providers
Configure and manage Auth0 tenants, including connections, rules, actions, and authentication flows
Develop and maintain APIs that power authentication and identity data exchange across platforms
Implement and customize login, registration, and federation workflows to support diverse application needs
Service Provider Onboarding & Integration: onboarding of new applications into the Auth0 platform, partnering with engineering teams across IDEXX to integrate their applications into CIAM
Defining and enforcing integration patterns, ensuring consistency and scalability.
Supporting migration of applications from legacy identity platforms into Auth0
Respond to ongoing requests, questions, and integration needs from multiple product and engineering teams
Review, validate, and approve configuration changes submitted by service provider teams through a shared repository
Manage the flow of changes across environments (dev → staging → production), ensuring proper sequencing and release timing
Coordinate with engineers across teams to align on sprint timelines, release schedules, and deployment dependencies
Support and troubleshoot authentication issues across multiple live applications
Perform ongoing maintenance and updates for existing service providers as requirements evolve
Balance competing priorities across multiple service providers needing updates at the same time
Help manage a growing pipeline of onboarding and maintenance work as adoption of Auth0 accelerates
Ensure that changes for one service provider do not negatively impact others sharing the same platform
Collaborate with BSAs and Product to stay aligned on deadlines, requirements, and rollout plans
Own and maintain the shared Auth0 configuration repository
Ensure quality and integrity of all incoming changes through code review and validation
Establish and enforce best practices for CIAM configuration, deployment, and release management
Monitor platform health, performance, and reliability across service providers
Contribute to CI/CD pipelines and DevOps practices supporting CIAM
Work closely with Product Managers (feature prioritization, roadmap alignment), BSAs (requirements, coordination, stakeholder communication), Security Architecture (compliance, security validation, standards), Engineering teams (integration, troubleshooting, deployment)
Communicate effectively across technical and non-technical stakeholders
Provide guidance and support to engineering teams adopting Auth0