Security Token Service Engineer – Identity & Access Management (IAM)

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, implement, and maintain authentication and authorization services that support enterprise applications and APIs.

• Build and manage token services that facilitate token issuance, exchange, validation, revocation, and introspection.

• Implement secure authentication and authorization workflows utilizing OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0.

• Develop and uphold JWT validation and token management functionalities.

• Integrate with enterprise identity providers such as Microsoft Entra ID, ADFS, and SiteMinder.

• Configure and integrate Keycloak to function as an identity broker.

• Establish secure federation and single sign-on capabilities.

• Troubleshoot intricate authentication, federation, and authorization challenges.

• Implement authorization enforcement at API gateways through PDP and PEP architectural patterns.

• Develop and integrate secure access controls for APIs, applications, and backend services.

• Collaborate with platform and software engineering teams to embed identity services into reusable enterprise solutions.

• Oversee the lifecycle of credentials and cryptographic keys, including client secrets, signing keys, rotation, and secure storage.

• Implement and manage PKI and certificate trust configurations.

• Support X.509 certificates, CA chains, TLS/mTLS, along with certificate issuance, renewal, and revocation.

• Document identity architectures, authentication workflows, authorization models, and security integrations.

• Collaborate with cybersecurity, platform engineering, and development teams.

• Assist in security assessments, technical reviews, audits, and authorization documentation.

• Contribute to scalable, reusable, and maintainable identity security solutions.

⛳️ Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent professional experience.

• A minimum of 3 years of practical experience in Identity & Access Management engineering.

• Experience in implementing OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0 authentication and federation workflows.

• Hands-on experience with token exchange, JWT validation, and token-based authentication.

• Experience integrating at least one enterprise identity provider, such as Microsoft Entra ID, ADFS, or SiteMinder.

• Familiarity with Keycloak or a similar identity broker.

• Working knowledge of Public Key Infrastructure (PKI), X.509 certificates, and TLS/mTLS.

• Proficient in developing backend services using Java, Go, Python, or a similar programming language.

• Strong troubleshooting, technical documentation, and problem-solving abilities.

• Capability to collaborate effectively with software engineers, cloud architects, and cybersecurity professionals.

• New hires assigned to this project must undergo and pass drug and alcohol tests as per our client's contract requirements.

• U.S. citizenship status is required.

• Preferred: Experience extending Keycloak using SPIs, custom authenticators, or custom integrations.

• Preferred: Experience in implementing fine-grained authorization using Open Policy Agent (OPA) or similar policy engines.

• Preferred: Familiarity with PDP and PEP architectures.

• Preferred: Experience with AWS KMS, HashiCorp Vault, HSMs, or similar key management technologies.

• Preferred: Experience in securing machine-to-machine communications, service accounts, and automated workloads.

• Preferred: Familiarity with Model Context Protocol (MCP) and authorization approaches for AI-enabled applications or agents.

• Preferred: Experience in integrating identity and authorization services with API gateways.

• Preferred: Familiarity with NIST 800-53, NIST 800-63, FedRAMP, or security authorization processes.

• Preferred: Experience in developing security services within AWS or other cloud environments.

• Preferred: Experience in supporting enterprise modernization, platform engineering, or distributed application integration initiatives.

🏝️ Benefits

• Ongoing learning and development opportunities.

• Competitive salaries.

• Health benefits.

• Flexible work arrangements.

• Benefits related to health, retirement, professional development, and more.