Apply Digital is a global digital transformation partner for change agents. Leveraging expertise that spans Business Transformation Strategy Product Design & Development Commerce Platform Engineering Data Intelligence Marketing Services Change Management and beyond we enable our clients to modernize their organizations and deliver meaningful impact to their business and customers.
Our 750 team members have helped transform global companies like Kraft Heinz NFL Moderna Lululemon Dropbox Atlassian AE Networks and The Very Group.
Apply Digital was founded in 2016 in Vancouver Canada. In the past nine years we have grown to nine cities across North America South America the UK and Europe.
Wherever we work in the world we envision Apply Digital as a safe empowered respectful and fun community for people every single day. Together we work to embody our SHAPE (smart humble active positive and excellent) values and make Apply Digital a space for our team to connect grow and support each other to make a difference.
LOCATION:Apply Digital is hybrid/remote friendly. The preferred candidate should be based in either the Greater Toronto Area or the Greater Vancouver Area of Canada working in hours that align toET (Eastern Timezone) or PT (Pacific Timezone).
THE ROLE:
Apply Digital seeks an Intermediate Engineer specializing in Customer Identity and Access Management (IAM). This role is a part of our Platforms Practice and is focused on implementing configuring and integrating enterprisegrade identity solutions. Your work will contribute to secure scalable and seamless access management solutions across the digital experiences we create for our clients. The ideal candidate has significant handson experience with leading IAM platforms. Familiarity with providers such as Okta Auth0 SAP Customer Data Cloud (Gigya) and Ping Identity. You will bring a strong understanding of identity protocols security best practices and system integration to develop and manage robust IAM solutions. This role requires a strong understanding of implementing secure compliant and highperforming identity solutions across the stack and platforms. Additionally excellent communication and collaboration skills within a remote setting are essential. While specialization in IAM is highly valued for immediate project impact for those interested in fulltime employment this position also offers a path to grow into a broader Platforms Engineer generalist role within our supportive practice environment.
Responsibilities:
Develop enterprisegrade CIAM solutions for secure and seamless user experiences (e.g. registration login profile management session handling).
Configure authentication and authorization workflows including SSO MFA social login passwordless options (e.g. FIDO2/WebAuthn) and OAuth 2.0/OIDC.
Implement privacy and compliance features (e.g. consent and preference management).
Integrate CIAM platforms with frontend apps (web/mobile) backend services and APIs.
Manage identity data securely and efficiently at scale including connections to directories or customer databases.
Troubleshoot complex identity issues and implement custom scripts or workflows to support integration and automation.
Partner with development security and data/marketing teams to ensure cohesive secure user journeys
Keen knowledge management of best practices within the Platforms Practice.
Ensure solutions comply with privacy regulations (GDPR CCPA) security threats and IAM platform advancements.
Engage with platform vendors for support or roadmap alignment.
Requirements:
Strong problemsolving skills across the stack in the context of identity and security.
Handson experience with at least one central CIAM platform (e.g. Okta Auth0 Ping Identity SAP CDC).
Practical experience with key identity standards (OAuth 2.0 OIDC SAML 2.0 and security best practices (e.g. token handling session management).
Familiarity with key IAM capabilities: SSO MFA federation user provisioning/lifecycle and directory integrations.
Proficiency in developing NextJS/React UIs for User Authentication flows including signin signup and signout flows.
Experience in developing authentication and authorization middleware and checks within NestJS or similar frameworks.
Experience deploying CIAM integrations in cloud environments (AWS GCP Azure).Comfortable with communicating and collaborating with remote distributed teamsComfort translating complex IAM concepts for technical audiences.
Interest in continuous learning and evolving toward broader platform responsibilities.
Familiarity with Agile development experience.
Nice To Haves:
NICE TO HAVESUnderstanding of 2FA/MFA user flows across both mobile and webFamiliarity with AWS Lambdas/RestifyIAM platform certifications (e.g. Okta PingIdentity).
Experience with CIAM features like progressive profiling or consent management.
Familiarity with Privileged Access Management (PAM) API security gateways (e.g. Apigee Kong) or IaC tools (e.g. Terraform).
Understanding of identityrelated compliance and identity data migration.
Strong knowledge of directory architecture and LDAP concepts.
Great projects: Broaden your skills on a range of engaging projects with international brands that have a global impact.
An inclusive and safe environment: Were truly committed to building a culture where you are celebrated and everyone feels welcome and safe.
Learning opportunities: We offer generous training budgets including partner tech certifications custom learning plans workshops mentorship and peer support.
Generous vacation policy: Worklife balance is key to our teams success so we offer flexible personal time offer (PTO); allowing ample time away from work to promote overall wellbeing.
Customizable benefits: Tailor your extended health and dental plan to your needs priorities and preferences.
Flexible work arrangements: We work in a variety of ways from remote to inoffice to a blend of both.
Apply Digital is committed to building a culture where differences are celebrated and everyone feels welcome. Thats why we value equal opportunity and nurture an inclusive workplace where our individual differences are recognized and valued.
For more information visit theDiversity Equity and Inclusion (DEI)section of our website. If you have accommodation needs at this stage of the recruitment process please inform us as soon as possible by emailing us at.
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.