Software Engineer (Full-Stack)

Summary

Join Apply Digital as an Intermediate Engineer specializing in Customer Identity and Access Management (IAM) and contribute to secure, scalable, and seamless access management solutions for our clients. This role involves implementing, configuring, and integrating enterprise-grade identity solutions, leveraging your expertise in leading IAM platforms like Okta, Auth0, SAP Customer Data Cloud (Gigya), and Ping Identity. You will be responsible for developing and managing robust IAM solutions, ensuring compliance with privacy regulations and security best practices. This position offers a path to grow into a broader Platforms Engineer generalist role within our supportive practice environment.

Requirements

• Strong problem-solving skills across the stack in the context of identity and security
• Hands-on experience with at least one central CIAM platform (e.g., Okta, Auth0, Ping Identity, SAP CDC)
• Practical experience with key identity standards (OAuth 2.0, OIDC, SAML 2.0) and security best practices (e.g., token handling, session management)
• Familiarity with key IAM capabilities: SSO, MFA, federation, user provisioning/lifecycle, and directory integrations
• Proficiency in developing NextJS/React UIs for User Authentication flows, including sign-in, sign-up, and sign-out flows
• Experience in developing authentication and authorization middleware and checks within NestJS or similar frameworks
• Experience deploying CIAM integrations in cloud environments (AWS, GCP, Azure)
• Comfortable with communicating and collaborating with remote, distributed teams
• Comfort translating complex IAM concepts for technical audiences
• Interest in continuous learning and evolving toward broader platform responsibilities
• Familiarity with Agile development experience

Responsibilities

• Develop enterprise-grade CIAM solutions for secure and seamless user experiences (e.g., registration, login, profile management, session handling)
• Configure authentication and authorization workflows, including SSO, MFA, social login, passwordless options (e.g., FIDO2/WebAuthn), and OAuth 2.0/OIDC
• Implement privacy and compliance features (e.g., consent and preference management)
• Integrate CIAM platforms with front-end apps (web/mobile), backend services, and APIs
• Manage identity data securely and efficiently at scale, including connections to directories or customer databases
• Troubleshoot complex identity issues and implement custom scripts or workflows to support integration and automation
• Partner with development, security, and data/marketing teams to ensure cohesive, secure user journeys
• Keen knowledge management of best practices within the Platforms Practice
• Ensure solutions comply with privacy regulations (GDPR, CCPA), security threats, and IAM platform advancements
• Engage with platform vendors for support or roadmap alignment

Preferred Qualifications

• Understanding of 2FA/MFA user flows across both mobile and web
• Familiarity with AWS Lambdas/Restify
• IAM platform certifications (e.g., Okta, PingIdentity)
• Experience with CIAM features like progressive profiling or consent management
• Familiarity with Privileged Access Management (PAM), API security gateways (e.g., Apigee, Kong), or IaC tools (e.g., Terraform)
• Understanding of identity-related compliance and identity data migration
• Strong knowledge of directory architecture and LDAP concepts

Benefits

• Great projects: Broaden your skills on a range of engaging projects with international brands that have a global impact
• An inclusive and safe environment: We’re truly committed to building a culture where you are celebrated and everyone feels welcome and safe
• Learning opportunities: We offer generous training budgets, including partner tech certifications, custom learning plans, workshops, mentorship, and peer support
• Generous vacation policy: Work-life balance is key to our team’s success, so we offer flexible personal time offer (PTO); allowing ample time away from work to promote overall well-being
• Customizable benefits: Tailor your extended health and dental plan to your needs, priorities, and preferences
• Flexible work arrangements: We work in a variety of ways, from remote, to in-office, to a blend of both