Description

You will validate controls and governance for Consumer Identity and Access Management (CIAM) platforms, specifically assessing the Auth0 environment.

Responsibilities

• Validate IdP configurations and federation protocols including SAML and OIDC.
• Evaluate authorization models such as RBAC, ABAC, and PBAC.
• Assess security controls for MFA, adaptive authentication, and password requirements.
• Review API security, token management, and third-party system integrations.
• Audit user lifecycle automation, including provisioning, deprovisioning, and account synchronization.
• Verify compliance with GDPR, CCPA, HIPAA, and PCI DSS standards.
• Analyze logging, monitoring, and SIEM integration for identity-related events.
• Assess vendor oversight and third-party security certifications like SOC 2 and ISO 27001.

Required Skills

• 10+ years of professional experience.
• 5+ years focused on identity architecture, access management, or technology audit.
• Deep understanding of authentication, authorization, and identity lifecycle management.
• Hands-on experience with SAML, OIDC, and OAuth.
• Expertise in CIAM, Cybersecurity, and ISO standards.
• Knowledge of NIST SP 800-63B guidance.
• Familiarity with WebAuthn and Passkeys.
• Experience with HIPAA and PCI DSS regulatory frameworks.
• Proven ability in risk assessment, compliance audits, and governance reporting.

Key Skills

Education

Bachelor's degree