Position Summary:We are looking for a Full Stack CIAM Engineer in USA to design, develop, and integrate modern Customer Identity and Access Management (CIAM) platform in Rockwell Automation. You will report to and work with the CIAM Technical Leader in building identity services, authentication and authorization, APIs, identity data, security policies, cloud services, and CI/CD pipelines. You will deliver secure, scalable customer identity experiences while ensuring compliance with enterprise security, privacy, and regulatory requirements. You will combine full-stack engineering skills with hands-on CIAM, IAM, API security, and cloud security experience.
Your Responsibilities:- Design secure customer-facing CIAM application services.
- Develop modern web experiences using React, Next.js, Angular, or similar technologies.
- Develop backend services using Java/Spring Boot, Node.js, Python, or similar technologies.
- Build reusable CIAM components, services, and APIs.
- Support development of customer registration, login, authentication, account recovery, profile, and account-management experiences.
- Modify existing programs and see through the release of modifications.
- Develop solutions using:OAuth 2.0OpenID ConnectSAMLJWTFIDO2/WebAuthnPasswordless authenticationMulti-factor authentication
- Implement secure machine-to-machine and service-to-service security.
- Participate in platform design with Product Owner and Technical Leader enhancing the capabilities of the CIAM platform.
- Develop custom CIAM integrations and extensions, custom authentication actions, hooks, policies, and workflows.
- Integrate CIAM with enterprise applications, SaaS platforms, APIs, and digital platforms.
- Support CIAM platform upgrades, enhancements, and modernization.
- Design and implement secure APIs supporting CIAM capabilities.
- Understand OAuth scopes, claims, tokens, and authorization policies.
- Understand integrating CIAM with Cloudflare and/or Azure application gateways.
- Implement API authentication, authorization, throttling, rate limiting, and abuse protection.
- Apply security-by-design principles to CIAM platform.
- support security testing, vulnerability remediation, penetration testing and application security reviews.
- Implement protection against:Credential stuffingAccount takeoverBot attacksToken theftSession hijackingIdentity enumerationAPI abusePrivilege escalation
- Implement encryption and secure secrets management.
- Experience deploying CIAM services in Azure cloud.
- Build CI/CD pipelines for CIAM applications and configurations.
- Automate CIAM configuration deployment across development, test, and production environments.
- Implement automated security and quality testing.
- Support production troubleshooting and incident resolution.
- Develop CI/CD pipelines using Azure DevOps, GitHub actions, Jenkins and equivalent technologies.
- Explore AI/ML, agentic AI, or MCP capabilities for CIAM.
- Develop AI-assisted identity operations, customer support, fraud detection, and security use cases.
- Support development of next-generation CIAM capabilities including:Authentication and authorizationRisk-based accessTransaction authorizationBehavioral analyticsIdentity threat detectionPasswordless authenticationDecentralized identityVerifiable credentialsPolicy-based authorization
The Essentials - You Will Have:- Bachelor's Degree or equivalent years of relevant work experience.
- Legal authorization to work in the US. We will not sponsor individuals for employment visas, now or in the future, for this job opening.
The Preferred - You Might Also Have:- Typically requires 8+ years of relevant software engineering experience with at least 2+ years working with IAM or CIAM technologies.
- Full-stack development experience.
- Experience developing enterprise-grade web applications and APIs.
- Experience with authentication and authorization.
- Hands-on experience with OAuth 2.0 and OpenID Connect.
- Experience integrating applications with CIAM/IAM platforms.
- Experience with API security.
- Experience with cloud platforms like Azure, AWS or GCP.
- Experience with CI/CD and DevSecOps.
- Experience with Docker and Kubernates.
- Database experience with mySQL, Azure SQL, MongoDB or similar DB technologies.
- Experience in an Agile development environment.
- Experience communicating with stakeholders during design sessions.
- Promote agreement amongst different team members.
- Experience helping to level up engineers by sharing knowledge.
- Experience with QA Testing, version control, continuous integration, build, deployment and monitoring.
What We Offer:- Health Insurance including Medical, Dental and Vision
- 401k
- Paid Time off
- Parental and Caregiver Leave
- Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
- To learn more about our benefits package, please visit at www..
This position is part of a job family. Experience will be the determining factor for position level and compensation.
#LI-Hybrid
#LI-MG4
#LifeAtRok
Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.
