- Basel, Basel City, Switzerland
We are looking for a CIAM Engineer to design, build, and operate secure, reliable customer identity and access management services. You will help customers register, sign in, recover their accounts, and manage their security settings across web and mobile applications.
Responsibilities
- Design and implement customer identity journeys, including registration, identity verification, sign-in, multi-factor authentication (MFA), account recovery, and account deletion.
- Integrate web and mobile applications with the CIAM platform using OpenID Connect (OIDC), OAuth 2.0, and SAML 2.0 where required.
- Configure and maintain authentication policies, federation connections, identity flows, and session and token settings.
- Implement controls against account takeover, credential stuffing, and automated abuse. Work with product and security teams to introduce stronger authentication where risk warrants it.
- Build automated tests and deployment pipelines for identity services and platform configuration. Support safe rollouts and rollbacks for changes that affect customer access.
Requirements
- Nice to have: passkeys
- Nice to have: WebAuthn
- Nice to have: FIDO2
- Nice to have: risk-based authentication
- Nice to have: bot mitigation