Senior Full Stack Customer Identity and Access Management Engineer

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

Position Summary:

We are looking for a Full Stack CIAM Engineer in USA to design, develop, and integrate modern Customer Identity and Access Management (CIAM) platform in Rockwell Automation. You will report to and work with the CIAM Technical Leader in building identity services, authentication and authorization, APIs, identity data, security policies, cloud services, and CI/CD pipelines. You will deliver secure, scalable customer identity experiences while ensuring compliance with enterprise security, privacy, and regulatory requirements. You will combine full-stack engineering skills with hands-on CIAM, IAM, API security, and cloud security experience.

Your Responsibilities:

• Design secure customer-facing CIAM application services.
• Develop modern web experiences using React, Next.js, Angular, or similar technologies.
• Develop backend services using Java/Spring Boot, Node.js, Python, or similar technologies.
• Build reusable CIAM components, services, and APIs.
• Support development of customer registration, login, authentication, account recovery, profile, and account-management experiences.
• Modify existing programs and see through the release of modifications.
• Develop solutions using:OAuth 2.0OpenID ConnectSAMLJWTFIDO2/WebAuthnPasswordless authenticationMulti-factor authentication
• Implement secure machine-to-machine and service-to-service security.
• Participate in platform design with Product Owner and Technical Leader enhancing the capabilities of the CIAM platform.
• Develop custom CIAM integrations and extensions, custom authentication actions, hooks, policies, and workflows.
• Integrate CIAM with enterprise applications, SaaS platforms, APIs, and digital platforms.
• Support CIAM platform upgrades, enhancements, and modernization.
• Design and implement secure APIs supporting CIAM capabilities.
• Understand OAuth scopes, claims, tokens, and authorization policies.
• Understand integrating CIAM with Cloudflare and/or Azure application gateways.
• Implement API authentication, authorization, throttling, rate limiting, and abuse protection.
• Apply security-by-design principles to CIAM platform.
• support security testing, vulnerability remediation, penetration testing and application security reviews.
• Implement protection against:Credential stuffingAccount takeoverBot attacksToken theftSession hijackingIdentity enumerationAPI abusePrivilege escalation
• Implement encryption and secure secrets management.

• Experience deploying CIAM services in Azure cloud.

• Build CI/CD pipelines for CIAM applications and configurations.

• Automate CIAM configuration deployment across development, test, and production environments.

• Implement automated security and quality testing.

• Support production troubleshooting and incident resolution.

• Develop CI/CD pipelines using Azure DevOps, GitHub actions, Jenkins and equivalent technologies.

• Explore AI/ML, agentic AI, or MCP capabilities for CIAM.

• Develop AI-assisted identity operations, customer support, fraud detection, and security use cases.

• Support development of next-generation CIAM capabilities including:Authentication and authorizationRisk-based accessTransaction authorizationBehavioral analyticsIdentity threat detectionPasswordless authenticationDecentralized identityVerifiable credentialsPolicy-based authorization

The Essentials - You Will Have:

• Bachelor's Degree or equivalent years of relevant work experience.
• Legal authorization to work in the US. We will not sponsor individuals for employment visas, now or in the future, for this job opening.

The Preferred - You Might Also Have:

• Typically requires 8+ years of relevant software engineering experience with at least 2+ years working with IAM or CIAM technologies.

• Full-stack development experience.
• Experience developing enterprise-grade web applications and APIs.
• Experience with authentication and authorization.
• Hands-on experience with OAuth 2.0 and OpenID Connect.
• Experience integrating applications with CIAM/IAM platforms.
• Experience with API security.
• Experience with cloud platforms like Azure, AWS or GCP.
• Experience with CI/CD and DevSecOps.
• Experience with Docker and Kubernates.
• Database experience with mySQL, Azure SQL, MongoDB or similar DB technologies.
• Experience in an Agile development environment.
• Experience communicating with stakeholders during design sessions.
• Promote agreement amongst different team members.
• Experience helping to level up engineers by sharing knowledge.
• Experience with QA Testing, version control, continuous integration, build, deployment and monitoring.

What We Offer:

• Health Insurance including Medical, Dental and Vision
• 401k
• Paid Time off
• Parental and Caregiver Leave
• Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
• To learn more about our benefits package, please visit at www.raquickfind.com.

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

This position is part of a job family. Experience will be the determining factor for position level and compensation.

#LI-Hybrid

#LI-MG4

#LifeAtRok

We are an Equal Opportunity Employer including disability and veterans. 

If you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at +1 (844) 404-7247.

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.