Senior Full Stack Engineer - CIAM

Description

The company makes automation technology that helps manufacturers be more productive, sustainable, and agile, and it has more than 28,000 employees.

The team is hiring a full stack CIAM engineer in the USA to design, build, and integrate a modern customer identity and access management platform. You will work with the CIAM Technical Leader on identity services, authentication and authorization, APIs, identity data, security policies, cloud services, and CI/CD pipelines.

The role combines full stack engineering with hands-on CIAM, IAM, API security, and cloud security work, and the goal is secure, scalable customer identity experiences that meet enterprise security, privacy, and regulatory requirements.

Responsibilities

• Design secure customer-facing CIAM application services.
• Build modern web interfaces with React, Next.js, Angular, or similar tools.
• Build backend services with Java/Spring Boot, Node.js, Python, or similar tools.
• Create reusable CIAM components, services, and APIs.
• Help build customer registration, login, authentication, account recovery, profile, and account management flows.
• Change existing programs and carry those changes through to release.
• Build solutions using OAuth 2.0, OpenID Connect, SAML, JWT, FIDO2/WebAuthn, passwordless authentication, and multi-factor authentication.
• Secure machine-to-machine and service-to-service communication.
• Take part in platform design with the Product Owner and Technical Leader to extend the CIAM platform.
• Build custom CIAM integrations, extensions, authentication actions, hooks, policies, and workflows.
• Connect CIAM with enterprise applications, SaaS platforms, APIs, and digital platforms.
• Help upgrade, enhance, and modernize the CIAM platform.
• Design and implement secure APIs for CIAM capabilities.
• Work with OAuth scopes, claims, tokens, and authorization policies.
• Understand how CIAM integrates with Cloudflare and/or Azure application gateways.
• Implement API authentication, authorization, throttling, rate limiting, and abuse protection.
• Apply security-by-design principles across the CIAM platform.
• Support security testing, vulnerability remediation, penetration testing, and application security reviews.
• Protect against credential stuffing, account takeover, bot attacks, token theft, session hijacking, identity enumeration, API abuse, and privilege escalation.
• Implement encryption and secure secrets management.
• Deploy CIAM services to Azure.
• Build CI/CD pipelines for CIAM applications and configurations.
• Automate CIAM configuration deployment across development, test, and production.
• Implement automated security and quality testing.
• Support production troubleshooting and incident resolution.
• Build CI/CD pipelines with Azure DevOps, GitHub Actions, Jenkins, or similar tools.
• Explore AI/ML, agentic AI, or MCP uses for CIAM.
• Build AI-assisted identity operations, customer support, fraud detection, and security use cases.
• Help develop next-generation CIAM capabilities such as authentication and authorization, risk-based access, transaction authorization, behavioral analytics, identity threat detection, passwordless authentication, decentralized identity, verifiable credentials, and policy-based authorization.

Requirements

• Bachelor's degree or equivalent relevant work experience.
• Legal authorization to work in the US. The company will not sponsor employment visas for this role, now or in the future.
• Preferred: 8+ years of relevant software engineering experience, with at least 2+ years working with IAM or CIAM technologies.
• Preferred: full stack development experience.
• Preferred: experience building enterprise-grade web applications and APIs.
• Preferred: experience with authentication and authorization.
• Preferred: hands-on experience with OAuth 2.0 and OpenID Connect.
• Preferred: experience integrating applications with CIAM or IAM platforms.
• Preferred: experience with API security.
• Preferred: experience with cloud platforms such as Azure, AWS, or GCP.
• Preferred: experience with CI/CD and DevSecOps.
• Preferred: experience with Docker and Kubernetes.
• Preferred: database experience with MySQL, Azure SQL, MongoDB, or similar.
• Preferred: experience in an Agile environment.
• Preferred: experience communicating with stakeholders in design sessions.
• Preferred: experience building agreement across team members.
• Preferred: experience helping grow other engineers by sharing knowledge.
• Preferred: experience with QA testing, version control, continuous integration, build, deployment, and monitoring.

Conditions

Hybrid work: you are expected at a Rockwell location on Mondays, Tuesdays, and Thursdays, unless you have a business obligation elsewhere.

This position is part of a job family, and experience determines the level and compensation.

The company is an equal opportunity employer, including for disability and veterans.

Benefits

• Health insurance with medical, dental, and vision coverage.
• 401(k).
• Paid time off.
• Parental and caregiver leave.
• Flexible work schedule, arranged with your manager to fit your personal life.