Senior Full Stack Engineer - CIAM

Milwaukee, Wisconsin, United States

Houston, Texas, United States

Mayfield Heights, Ohio, United States

Rockwell Automation is a global technology leader focused on helping the world's manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility
-our people are energized problem solvers that take pride in how thework we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that's you we would love to have you join us!

Job Description

We are looking for a Full Stack CIAM Engineer in USA to design, develop, and integrate modern Customer Identity and Access Management (CIAM) platform in Rockwell Automation. You will report to and work with the CIAM Technical Leader in building identity services, authentication and authorization, APIs, identity data, security policies, cloud services, and CI/CD pipelines. You will deliver secure, scalable customer identity experiences while ensuring compliance with enterprise security, privacy, and regulatory requirements.

You will combine full-stack engineering skills with hands-on CIAM, IAM, API security, and cloud security experience.

• Design secure customer-facing CIAM application services.
• Develop modern web experiences using React, Next.js, Angular, or similar technologies.
• Develop backend services using Java/Spring Boot, Node.js, Python, or similar technologies.
• Build reusable CIAM components, services, and APIs.
• Support development of customer registration, login, authentication, account recovery, profile, and account-management experiences.
• Modify existing programs and see through the release of modifications.
• Develop solutions using:
  
  OAuth 2.0
  
  OpenID ConnectSAMLJWTFIDO2/Web Authn Passwordless  authentication
  
  Multi-factor authentication
• Implement secure machine-to-machine and service-to-service security.
• Participate in platform design with Product Owner and Technical Leader enhancing the capabilities of the CIAM platform.
• Develop custom CIAM integrations and extensions, custom authentication actions, hooks, policies, and workflows.
• Integrate CIAM with enterprise applications, SaaS platforms, APIs, and digital platforms.
• Support CIAM platform upgrades, enhancements, and modernization.
• Design and implement secure APIs supporting CIAM capabilities.
• Understand OAuth scopes, claims, tokens, and authorization policies.
• Understand integrating CIAM with Cloudflare and/or Azure application gateways.
• Implement API authentication, authorization, throttling, rate limiting, and abuse protection.
• Apply security-by-design principles to CIAM platform.
• support security testing, vulnerability remediation, penetration testing and application security reviews.
• Implement protection against:
  
  Credential stuffing
  
  Account takeover
  
  Bot attacks
  
  Token theft
  
  Session hijacking
  
  Identity enumerationAPI abuse
  
  Privilege escalation
• Implement encryption and secure secrets management.

• Experience deploying CIAM services in Azure cloud.

• Build CI/CD pipelines for CIAM applications and configurations.

• Automate CIAM configuration deployment across development, test, and production environments.

• Implement automated security and quality testing.

• Support production troubleshooting and incident resolution.

• Develop CI/CD pipelines using Azure Dev Ops, Git Hub actions, Jenkins and equivalent technologies.

• Explore AI/ML, agentic AI, or MCP capabilities for CIAM.

• Develop AI-assisted identity operations, customer support, fraud detection, and security use cases.

• Support development of next-generation CIAM capabilities including:
  
  Authentication and authorization
  
  Risk-based access
  
  Transaction authorization
  
  Behavioral analytics
  
  Identity threat detection
  
  Passwordless authentication
  
  Decentralized identity
  
  Verifiable credentials
  
  Policy-based authorization

• Bachelor's Degree or equivalent years of relevant work experience.
• Legal authorization to work in the US. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

• Typically requires 8+ years of relevant software engineering experience with at least 2+ years working with IAM or CIAM technologies.

• Full-stack development experience.
• Experience…