Senior IAM Engineer

Bonterra

9d•Onsite

About The Position

The Senior Software Engineer (Auth0) designs, implements, and maintains secure, scalable identity and access management (IAM) solutions across Bonterra’s product portfolio. This role applies deep expertise in Auth0, OAuth 2.0/OpenID Connect, SAML, and modern web application security to deliver compliant, resilient authentication and authorization services. Working in an AI-first engineering environment, the Senior Software Engineer leverages AI-assisted development tools and AI-driven security capabilities to accelerate secure coding practices, automate threat detection, and improve system reliability and performance. The role collaborates with engineering leadership, architects, security, DevOps, and product teams to integrate enterprise identity providers, modernize legacy authentication systems, and ensure secure user experiences across web, API, and microservices architectures. This position provides technical guidance and informal leadership to peers through code reviews, design feedback, and knowledge sharing but does not have formal people management responsibilities.

Requirements

Demonstrated experience designing and implementing authentication and authorization systems in production environments.
Strong hands-on expertise with Auth0 or comparable IDaaS platforms, including configuration, customization, and enterprise integrations.
Proficiency in secure software development using Node.js, TypeScript, and modern web frameworks.
Practical experience implementing OAuth 2.0, OpenID Connect, SAML 2.0, JWT validation, RBAC/ABAC models, and zero-trust principles.
Experience securing RESTful APIs and web applications against common vulnerabilities, including OWASP Top 10 risks.
Experience implementing and managing multi-factor authentication solutions and distributed session management.
Familiarity with AWS cloud services, infrastructure as code, CI/CD pipelines, and DevOps practices.
Experience using AI coding assistants and automated security scanning tools to enhance development efficiency and code quality.
Ability to document technical designs, support audits, and align implementations with security and compliance requirements.
Bachelor’s degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.

Nice To Haves

3–7 years of progressive software development experience, including at least 2 years focused on identity and access management.
Experience deploying and securing Next.js applications in cloud or edge environments.
Experience migrating legacy authentication systems to modern IDaaS platforms.
Familiarity with Terraform, CloudFormation, containerization (Docker, Kubernetes, ECS), and secrets management tools.
Exposure to advanced identity protocols, passwordless authentication, WebAuthn, and OAuth extensions.
Experience integrating AI-driven threat detection, anomaly detection, or behavioral analysis into authentication systems.
Experience supporting security incident response, logging, monitoring, and SIEM integrations.
Auth0 certifications or equivalent advanced tenant administration experience.

Responsibilities

Design and implement secure authentication and authorization services, spending approximately 60–70% of time coding and reviewing production-quality code to support scalable IAM capabilities across multiple applications.
Develop and maintain Auth0 integrations, including custom actions, rules, hooks, and tenant configurations, to enable secure SSO, MFA, adaptive authentication, passwordless login, and session management.
Implement OAuth 2.0 and OpenID Connect flows (authorization code with PKCE, client credentials, device flow, refresh token rotation) and SAML 2.0 integrations to support enterprise and third-party federation requirements.
Build and secure Next.js authentication patterns, including API route protection, middleware authentication, server components, server actions, and session management for App Router and Pages Router implementations.
Integrate enterprise identity providers (e.g., Active Directory, Azure AD, AWS Cognito, LDAP) and develop adapters for legacy or third-party systems to ensure seamless federation and user lifecycle management.
Leverage AI coding assistants and AI-powered security tools in daily development workflows to automate code reviews, improve test coverage, detect vulnerabilities, and enhance adaptive authentication mechanisms.
Collaborate with engineering managers and architects to design large-scale identity solutions, document architecture decisions, and ensure alignment with zero-trust and compliance requirements.
Partner with QA engineers to define, automate, and maintain unit, integration, penetration, and authentication flow tests within CI/CD pipelines to enforce secure deployment standards.
Work with DevOps and SaaS teams to implement secure CI/CD pipelines, infrastructure as code, automated security scanning, and secrets management practices across cloud environments.
Troubleshoot complex production authentication and authorization issues, conduct root cause analyses, and implement performance optimizations for high-volume systems.
Contribute to security and compliance initiatives by supporting audits, documenting controls, and implementing safeguards aligned with frameworks such as SOC 2, GDPR, and CCPA.
Provide technical guidance to peers through design reviews, pair programming, and documentation to promote secure development standards and consistent implementation practices.