Cloud Identity Engineer

Req ID: 112237-1
Title: Cloud Identity Engineer
Locations: Burlington, MA
Duration: 06+ Months
Pay Range: $53-$55/Hour on W2/ C2C (All inclusive)

We are seeking an experiencedCloud Identity Engineer to design, implement, and support a modernCustomer Identity and Access Management (CIAM) platform that serves as the centralized authentication and authorization service for enterprise applications, APIs, cloud services, and workforce identities.

The ideal candidate will possess strong expertise inClient Entra ID (Azure AD),OAuth2,OpenID Connect (OIDC),SAML,SCIM,Zero Trust Security, and cloud-native identity solutions. This role will be responsible for providing secure authentication services includingSingle Sign-On (SSO), Multi-Factor Authentication (MFA), Federation, Privileged Access Management (PAM), Identity Governance, and access management across Azure, AWS, GCP, SaaS platforms, and custom applications.

Key Responsibilities

• Design, develop, and maintain enterprise identity and access management solutions using Client Entra ID (Azure AD).
• Implement and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and Federation services.
• Design and integrate authentication protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM.
• Build and manage CIAM solutions for customer-facing and workforce identity platforms.
• Configure and support Entra ID B2C, Identity Experience Framework (IEF), and authentication orchestration solutions.
• Integrate enterprise applications, APIs, cloud services, and SaaS platforms with centralized identity providers.
• Develop and enforce Zero Trust Identity Architecture and security best practices.
• Implement Identity Governance, Privileged Identity Management (PIM), and role-based access control (RBAC).
• Collaborate with application teams to onboard applications using SAML and OIDC-based authentication.
• Support Azure, AWS, and GCP identity integrations and federation requirements.
• Troubleshoot authentication, authorization, federation, and access-related issues.
• Participate in security reviews, audits, incident management, and compliance initiatives.
• Create technical documentation, implementation guides, and operational procedures.

Required Skills

Identity & Access Management

• Client Entra ID (Azure AD)
• Azure AD B2C
• Identity Experience Framework (IEF)
• Customer Identity and Access Management (CIAM)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Conditional Access Policies
• Federation Services
• Identity Governance
• Privileged Identity Management (PIM)

Authentication & Authorization

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• SCIM
• JWT Tokens
• RBAC
• Zero Trust Architecture

Cloud Platforms

• Client Azure
• AWS
• Google Cloud Platform (GCP)

Security

• Identity Security
• Access Management
• Cloud Security
• Authentication Orchestration
• Privileged Access Management (PAM)

Preferred Skills

• Experience with Transmit Security.
• Hands-on experience with Azure AD B2C custom policies.
• CI/CD and Infrastructure as Code experience.
• Experience integrating APIs and cloud-native applications with identity providers.
• Understanding of ITIL processes and service management.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Engineering, or equivalent.
• 8+ years of IT experience.
• 5+ years of hands-on experience in Identity & Access Management technologies.
• Proven experience implementing enterprise authentication and authorization solutions.
• Excellent communication, stakeholder management, and problem-solving skills.