CIAM Engineer

avacone Switzerland

. Design and implement customer identity journeys, including registration, identity verification, sign-in, multi-factor authentication (MFA), account recovery, and account deletion.

Posted 11/6/2026full-timeBasel • SwitzerlandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing customer identity journeys, including authentication services and identity verification. Proficient in integrating CIAM platforms and managing security controls while ensuring compliance with privacy regulations.

Highest-signal resume keywords

Customer Identity And Access Management (CIAM)OAuth 2.0OpenID ConnectMulti-Factor Authentication (MFA)Automated Testing And CI/CD

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity VerificationAccount RecoverySession ManagementToken ValidationProgramming Languages (Java, C#, TypeScript, Python, Go)Federation ConnectionsRisk-Based AuthenticationBot MitigationInfrastructure-As-Code (Terraform)Privacy Regulations (GDPR)

Soft Skills

CollaborationCommunicationTroubleshootingStakeholder Engagement

Tools & Technologies

Auth0Ping IdentityMicrosoft Entra External IDAWS CognitoWebAuthnFIDO2

Industry Keywords

Customer Identity Data ControlsData MinimizationCredential StuffingAccount Takeover DetectionOperational Reliability

Tech Stack

Tools & technologies

AWSJavaPythonTerraformTypeScriptGo

About the role

Key responsibilities & impact

Design and implement customer identity journeys, including registration, identity verification, sign-in, multi-factor authentication (MFA), account recovery, and account deletion.
Integrate web and mobile applications with the CIAM platform using OpenID Connect (OIDC), OAuth 2.0, and SAML 2.0 where required.
Configure and maintain authentication policies, federation connections, identity flows, and session and token settings.
Implement controls against account takeover, credential stuffing, and automated abuse; introduce stronger authentication where risk warrants it.
Build automated tests and deployment pipelines for identity services and platform configuration; support safe rollouts and rollbacks affecting customer access.
Monitor authentication availability, latency, and success rates; investigate production incidents and address recurring failure modes.
Partner with security and privacy teams to implement customer identity data controls, including data minimization, retention, and deletion.
Maintain technical documentation, integration guides, and operational runbooks for teams using the CIAM platform.
Collaborate with product, application engineering, security, privacy, and platform teams to balance security, usability, and operational reliability.

Requirements

What you’ll need

Hands-on experience implementing and operating customer-facing identity or authentication services in production.
Practical experience with at least one CIAM platform, such as Auth0, Ping Identity, Microsoft Entra External ID, or AWS Cognito.
Strong understanding of OAuth 2.0 and OpenID Connect, including Authorization Code with PKCE, token validation, and session management.
Experience implementing MFA, account recovery, and federation; ability to troubleshoot authentication failures across applications, APIs, and identity providers.
Proficiency in at least one programming language used for backend or platform engineering, such as Java, C#, TypeScript, Python, or Go.
Experience with automated testing, CI/CD, and production troubleshooting using logs and metrics.
Ability to explain security and user experience trade-offs clearly and work with both technical and non-technical stakeholders.
Preferred: experience implementing passkeys or other passwordless authentication using WebAuthn and FIDO2.
Preferred: experience with risk-based authentication, bot mitigation, or account takeover detection.
Preferred: experience migrating customer identities between platforms, including planning for credential continuity and staged cutovers.
Preferred: experience managing identity platform configuration with infrastructure-as-code tools such as Terraform.
Preferred: familiarity with privacy requirements for customer identity data, such as GDPR, and experience translating them into technical controls.