Lead Engineer - Customer Identity & Authentication; Transmit Security & Apigee

Position: Lead Engineer - Customer Identity & Authentication (Transmit Security & Apigee)
Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible. Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Location

The job is located at Atlanta, GA. This job requires onsite participation.

About the role you are considering

We are looking for a skilled CIAM Engineer with expertise in Transmit Security and Apigee to build secure, scalable, and seamless customer authentication solutions. The role focuses on passwordless authentication, fraud prevention, API security, and identity lifecycle management across web and mobile platforms.

Customer Identity & Authentication

* Design and implement Transmit Security CIAM solutions

* Enable passwordless authentication, adaptive MFA, and risk-based authentication (RBA)

* Implement FIDO2/Web Authn, passkeys, biometrics, OTP, and push authentication

* Build authentication and registration journeys using Transmit Journey Orchestration

* Configure OIDC, OAuth 2.0, and SAML flows

* Manage identity lifecycle: registration, login, step-up auth, recovery, consent, profile updates

* Use MongoDB for storing profiles, session data, device fingerprints, and fraud telemetry

Fraud & Risk Intelligence

* Integrate Transmit Risk & Fraud Intelligence via Apigee

* Apply device, behavioral, and network signals for authentication decisions

* Implement real-time risk scoring to prevent ATO, credential stuffing, and bot attacks

* Align fraud rules with Transmit policies and Apigee enforcement

Platform Engineering & Dev Ops

* Deploy solutions on AWS/GCP

* Build CI/CD pipelines using Infrastructure-as-Code

* Manage secrets, tokens, and certificates securely

* Ensure high availability, scalability, and performance

Security & Compliance

* Apply Zero Trust principles across identity and API layers

* Ensure compliance with PCI-DSS, SOC 2, GDPR

* Support audits with logs, access records, and fraud reports

* Perform threat modeling and security reviews

Apigee & API Integration

* Develop Apigee API proxies for identity and fraud services

* Implement OAuth/OIDC mediation, JWT validation, token introspection

* Configure policies for rate limiting, threat protection, and payload transformation

* Enable API security, analytics, and monitoring

* Support integrations across channels, CIAM, and backend systems

Troubleshooting & Optimization

* Resolve issues in authentication, tokens, and API proxies

* Optimize performance and user experience

* Promote adoption of passwordless and low-friction authentication

Required Skills

* Experience with Transmit Security and Apigee

* Knowledge of OAuth 2.0, OIDC, SAML, FIDO2/Web Authn

* Hands-on with AWS/GCP, MongoDB, API security, CI/CD

* Strong understanding of Zero Trust and identity security

The base compensation range for this role in the posted location is: 106230 to 145000

Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.

The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.

These may include, but are not limited to:
Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.

It is not typical for candidates to be hired at or near the top of the posted compensation range.

In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.

Capgemini offers a comprehensive, non-negotiable…