Engineer, IAM

Are you looking to Optimize your life? Start your exciting path to a rewarding career today! We are Optimum, a leader in the fast‑paced world of connectivity, and we're seeking driven and enthusiastic professionals to join our team, empower lives, fuel businesses, and drive innovation. Connectivity is now longer a luxury, but a necessity. A career at Optimum means you'll be enabling progress and enhancing lives by providing reliable, high‑speed connectivity solutions that keep the world connected.

Our successes, now and in the future, are powered by our amazing product, a commitment to our people and culture, and the connections we make in our communities. If you are resourceful, collaborative, and passionate about delivering consistent excellence, Optimum is for you!

As an Identity & Access Management Engineer on the Customer IAM team, you are a hands‑on practitioner responsible for the configuration, integration, and ongoing operations of our enterprise Customer IDP platform. You translate IAM strategy into working solutions, building authentication flows, provisioning connectors, and migration integrations that application teams across the company rely on every day. You will work directly with application development teams to guide them through the adoption of modern authentication standards (OIDC, OAuth 2.0, SAML 2.0, FIDO2/Web Authn), troubleshoot complex integration issues, and build the tooling and documentation that make a seamless customer experience possible.

This role sits at the intersection of security engineering, platform operations, and developer experience.

• Administer and configure the enterprise customer identity platform, including application integrations (OIDC, SAML), authentication policies, MFA, and network/security settings
• Manage identity data and lifecycle processes, including directory schema, attribute mappings, group rules, and automated provisioning/de‑provisioning (SCIM, workflows)
• Configure and maintain authorization services, including scopes, claims, and access policies aligned to application requirements
• Monitor platform health and security using logs and SIEM integrations; investigate issues and execute remediation based on established runbooks
• Maintain operational documentation, runbooks, and support materials for internal and customer‑facing teams

• Execute application migrations from legacy authentication systems to modern CIAM solutions using established playbooks
• Configure and validate authentication integrations (OIDC, SAML), ensuring secure and seamless end‑to‑end authentication experiences
• Test authentication and authorization flows across development, staging, and production environments, and coordinate issue resolution with application teams
• Support implementation of advanced authentication methods, including MFA and passwordless or phishing‑resistant mechanisms
• Track migration progress and contribute to reporting for application onboarding and modernization efforts

• Serve as a technical advisor to application development teams integrating with the CIAM platform
• Provide guidance on authentication design, token usage, and session management aligned with identity standards
• Develop and maintain documentation, integration guides, and code samples to enable efficient onboarding
• Troubleshoot complex authentication and provisioning issues using system logs, browser diagnostics, and application insights
• Participate in architecture reviews and promote secure, standards‑based identity patterns
• Contribute to knowledge sharing through documentation, demos, and team enablement sessions

• Implement and maintain authentication and access controls aligned with enterprise security policies and data sensitivity requirements
• Support audit and compliance activities (e.g., SOX, SOC 2, PCI‑DSS) including evidence collection and access reporting
• Participate in identity‑related incident response and contribute to root cause analysis and process improvement
• Maintain platform security hygiene, including policy…