Senior Full Stack Engineer - CIAM

Rockwell Automation•Milwaukee, WI

4d•Hybrid

About The Position

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. We are looking for a Full Stack CIAM Engineer in USA to design, develop, and integrate modern Customer Identity and Access Management (CIAM) platform in Rockwell Automation. You will report to and work with the CIAM Technical Leader in building identity services, authentication and authorization, APIs, identity data, security policies, cloud services, and CI/CD pipelines. You will deliver secure, scalable customer identity experiences while ensuring compliance with enterprise security, privacy, and regulatory requirements. You will combine full-stack engineering skills with hands-on CIAM, IAM, API security, and cloud security experience.

Requirements

Bachelor's Degree or equivalent years of relevant work experience.
Legal authorization to work in the US.
Typically requires 8+ years of relevant software engineering experience with at least 2+ years working with IAM or CIAM technologies.
Full-stack development experience.
Experience developing enterprise-grade web applications and APIs.
Experience with authentication and authorization.
Hands-on experience with OAuth 2.0 and OpenID Connect.
Experience integrating applications with CIAM/IAM platforms.
Experience with API security.
Experience with cloud platforms like Azure, AWS or GCP.
Experience with CI/CD and DevSecOps.
Experience with Docker and Kubernates.
Database experience with mySQL, Azure SQL, MongoDB or similar DB technologies.
Experience in an Agile development environment.
Experience communicating with stakeholders during design sessions.
Promote agreement amongst different team members.
Experience helping to level up engineers by sharing knowledge.
Experience with QA Testing, version control, continuous integration, build, deployment and monitoring.

Responsibilities

Design secure customer-facing CIAM application services.
Develop modern web experiences using React, Next.js, Angular, or similar technologies.
Develop backend services using Java/Spring Boot, Node.js, Python, or similar technologies.
Build reusable CIAM components, services, and APIs.
Support development of customer registration, login, authentication, account recovery, profile, and account-management experiences.
Modify existing programs and see through the release of modifications.
Develop solutions using: OAuth 2.0, OpenID Connect, SAML, JWT, FIDO2/WebAuthn, Passwordless authentication, Multi-factor authentication.
Implement secure machine-to-machine and service-to-service security.
Participate in platform design with Product Owner and Technical Leader enhancing the capabilities of the CIAM platform.
Develop custom CIAM integrations and extensions, custom authentication actions, hooks, policies, and workflows.
Integrate CIAM with enterprise applications, SaaS platforms, APIs, and digital platforms.
Support CIAM platform upgrades, enhancements, and modernization.
Design and implement secure APIs supporting CIAM capabilities.
Understand OAuth scopes, claims, tokens, and authorization policies.
Understand integrating CIAM with Cloudflare and/or Azure application gateways.
Implement API authentication, authorization, throttling, rate limiting, and abuse protection.
Apply security-by-design principles to CIAM platform.
Support security testing, vulnerability remediation, penetration testing and application security reviews.
Implement protection against: Credential stuffing, Account takeover, Bot attacks, Token theft, Session hijacking, Identity enumeration, API abuse, Privilege escalation.
Implement encryption and secure secrets management.
Experience deploying CIAM services in Azure cloud.
Build CI/CD pipelines for CIAM applications and configurations.
Automate CIAM configuration deployment across development, test, and production environments.
Implement automated security and quality testing.
Support production troubleshooting and incident resolution.
Develop CI/CD pipelines using Azure DevOps, GitHub actions, Jenkins and equivalent technologies.
Explore AI/ML, agentic AI, or MCP capabilities for CIAM.
Develop AI-assisted identity operations, customer support, fraud detection, and security use cases.
Support development of next-generation CIAM capabilities including: Authentication and authorization, Risk-based access, Transaction authorization, Behavioral analytics, Identity threat detection, Passwordless authentication, Decentralized identity, Verifiable credentials, Policy-based authorization.