{"id":3807438,"url":"https://alion.io/job/avacone-group-eu-ciam-engineer","title":"CIAM Engineer","company":{"id":669451,"name":"Avacone Group EU","domain":"avacone.eu","url":"https://alion.io/company/avacone","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Basel, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Auth0","optional":false},{"name":"AWS","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Go","optional":false},{"name":"Java","optional":false},{"name":"Ping Identity","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"TypeScript","optional":false},{"name":"GDPR","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-05T13:48:55Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-06T12:57:03Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Role Overview\nWe are looking for a CIAM Engineer to design, build, and operate secure, reliable customer identity and access management services. You will help customers register, sign in, recover their accounts, and manage their security settings across web and mobile applications.\nYou will work with product, application engineering, security, privacy, and platform teams to balance security, usability, and operational reliability throughout the customer identity lifecycle.\nKey Responsibilities\nDesign and implement customer identity journeys, including registration, identity verification, sign-in, multi-factor authentication (MFA), account recovery, and account deletion.\nIntegrate web and mobile applications with the CIAM platform using OpenID Connect (OIDC), OAuth 2.0, and SAML 2.0 where required.\nConfigure and maintain authentication policies, federation connections, identity flows, and session and token settings.\nImplement controls against account takeover, credential stuffing, and automated abuse. Work with product and security teams to introduce stronger authentication where risk warrants it.\nBuild automated tests and deployment pipelines for identity services and platform configuration. Support safe rollouts and rollbacks for changes that affect customer access.\nMonitor authentication availability, latency, and success rates. Investigate production incidents and address recurring failure modes.\nPartner with security and privacy teams to implement customer identity data controls, including data minimization, retention, and deletion.\nMaintain technical documentation, integration guides, and operational runbooks for teams that depend on the CIAM platform.\nRequirements\nRequired Qualifications\nHands-on experience implementing and operating customer-facing identity or authentication services in production.\nPractical experience with at least one CIAM platform, such as Auth0, Ping Identity, Microsoft Entra External ID, or AWS Cognito.\nStrong understanding of OAuth 2.0 and OpenID Connect, including Authorization Code with PKCE, token validation, and session management.\nExperience implementing MFA, account recovery, and federation. Ability to troubleshoot authentication failures across applications, APIs, and identity providers.\nProficiency in at least one programming language used for backend or platform engineering, such as Java, C#, TypeScript, Python, or Go.\nExperience with automated testing, CI/CD, and production troubleshooting using logs and metrics.\nAbility to explain security and user experience trade-offs clearly and work with both technical and non-technical stakeholders.\nPreferred Qualifications\nExperience implementing passkeys or other passwordless authentication using WebAuthn and FIDO2.\nExperience with risk-based authentication, bot mitigation, or account takeover detection.\nExperience migrating customer identities between platforms, including planning for credential continuity and staged cutovers.\nExperience managing identity platform configuration with infrastructure-as-code tools such as Terraform.\nFamiliarity with privacy requirements for customer identity data, such as GDPR, and experience translating them into technical controls.","description_format":"text","description_chars":3204,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Healthcare & Life Sciences Consulting"],"lifecycle":[{"event":"open","at":"2026-11-05T13:48:55Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/avacone-group-eu-ciam-engineer","json_url":"https://alion.io/job/avacone-group-eu-ciam-engineer.json","meta":{"generated_at":"2026-11-06T16:21:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30402,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":669451},"rest":"https://alion.io/mcp/rest/get_company?id=669451"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favacone-group-eu-ciam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favacone-group-eu-ciam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favacone-group-eu-ciam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avacone-group-eu-ciam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favacone-group-eu-ciam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3807438}},{"tool":"search_jobs","arguments":{"company":"avacone.eu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3807438},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}