IAM Engineer/Auth0/JavaScript

Position: IAM Engineer/Auth0/JavaScript
Location: Remote (EST/CST)
Duration: Full Time/Direct Hire

Job Description:

We are seeking an IAM Engineer with strong hands-on Auth0 experience to support a modern customer identity platform. This role will focus on integrating applications into Auth0, customizing authentication and security workflows, and supporting identity integrations across customer-facing systems.

This is not a traditional internal IAM administration role. The ideal candidate should be comfortable both configuring Auth0 and extending identity workflows with code, especially JavaScript and Node.js.

Key Responsibilities

Integrate new applications into Auth0, including customer portals, Salesforce, and other external-facing platforms.

Configure and support SSO, SAML, OAuth/OIDC, MFA, login flows, and access controls.

Customize authentication and security workflows using Auth0 Actions, Rules, and JavaScript.

Build logic to support adaptive authentication scenarios, such as triggering MFA based on location, device, risk level, or user behavior.

Support identity integrations across platforms such as Auth0, Salesforce, Genesys, and other business systems.

Help ensure user identities, credentials, and access remain consistent across connected platforms.

Assist with defining and enforcing security policies around MFA, passkeys, authentication methods, and access requirements.

Balance security requirements with customer experience and business needs.

Work with Auth0 logs and integrate identity logging into monitoring tools such as Microsoft Sentinel.

Use APIs and automation to detect suspicious login activity, trigger alerts, and support identity-related workflows.

Required Skills and Experience

Strong hands-on experience with Auth0.

Experience supporting customer identity and access management, also known as CIAM, or external-facing identity platforms.

Ability to perform light development using JavaScript and/or Node.js.

Experience with SSO, SAML, OAuth/OIDC, and MFA.

Experience configuring and customizing identity workflows.

Ability to integrate applications into an identity platform and troubleshoot authentication issues.

Understanding of authentication flows, access controls, user lifecycle, and identity security best practices.

Experience working with APIs, logs, monitoring, and automation.

Strong communication skills and the ability to work with security, application, infrastructure, and business teams.

Preferred Experience

Experience integrating Auth0 with Salesforce, Genesys, or similar enterprise platforms.

Experience with Microsoft Sentinel or similar logging and monitoring tools.

Experience with adaptive authentication, passkeys, risk-based authentication, or modern MFA strategies.

Experience supporting large-scale customer-facing platforms.

Understanding of user experience considerations in customer authentication flows.

Core Project Areas

1. Application Onboarding into Auth0

Integrate new applications, including customer portals, Salesforce, and other platforms, into Auth0.

Set up SSO, login flows, and access controls.

2. Customizing Login and Security Flows

Build custom authentication logic using Auth0 Actions, Rules, and JavaScript.

Trigger MFA based on user behavior such as location, device, risk, or other business rules.

Modify authentication flows based on security and business requirements.

3. Identity Integrations Across Platforms

Sync identities between systems such as Auth0, Salesforce, Genesys, and other enterprise platforms.

Ensure users, credentials, and access stay consistent across platforms.

4. Security Policy Implementation

Help define and enforce MFA strategies, including SMS versus stronger authentication methods.

Support passkey adoption and help work through business resistance to modern authentication methods.

Balance security requirements with the overall customer experience.

5. Logging, Monitoring, and Automation

Work with Auth0 logs and integrate identity logging into tools such as Microsoft Sentinel.

Build automations via APIs to detect suspicious logins and trigger alerts or actions.

What This Role Is Not

Not primarily an Entra ID or Active Directory administration role.

Not a purely point-and-click IAM configuration role.

Not basic Okta administration or simple user provisioning.

Not just a basic user provisioning position.