Description

You will validate controls and governance for Consumer Identity and Access Management (CIAM) platforms, specifically assessing the Auth0 environment.

This role is on-site.

Responsibilities

• Validate IdP configurations and federation protocols including SAML and OIDC.
• Evaluate authorization models such as RBAC, ABAC, and PBAC.
• Assess security controls for MFA, adaptive authentication, and password requirements.
• Audit user lifecycle automation, including provisioning, deprovisioning, and account synchronization.
• Verify compliance with GDPR, CCPA, HIPAA, and PCI DSS standards.

Required Skills

• 10+ years of professional experience in technology audit or cybersecurity.
• 5+ years focused on identity architecture, access management, or CIAM.
• Deep understanding of authentication, authorization, and identity lifecycle management.
• Hands-on experience with SAML, OIDC, and OAuth.
• Expertise in CIAM, Cybersecurity, and ISO standards (ISO 27001).
• Knowledge of NIST SP 800-63B guidance.
• Familiarity with WebAuthn and Passkeys.
• Experience with HIPAA and PCI DSS regulatory frameworks.

Preferred Skills

• Certifications such as CISSP or CISA.
• Experience with SOC 2 vendor oversight and third-party security certifications.

Bachelor's degree required.

Key Skills

Education

Bachelor's degree