Position Overview
We're seeking an experienced professional to architect and oversee secure authentication, authorization, and API gateway implementations. This role emphasizes expertise in OAuth 2.0, OpenID Connect, SSO, API security, and microservices architecture with the Auth0 and Kong platforms.
Key Responsibilities
- Architect secure authentication and authorization workflows using Auth0.
- Administer Kong API Gateway for routing, rate limiting, and monitoring functions.
- Deploy OAuth 2.0, OIDC, SAML, JWT, and RBAC/ABAC security frameworks.
- Develop and maintain Auth0 rules, actions, and hooks.
- Integrate Auth0 across web, mobile, and backend applications.
- Configure Kong plugins for authentication, logging, analytics, and traffic management.
- Implement API security protocols including token validation and mutual TLS.
- Collaborate with frontend, backend, DevOps, and security teams.
- Conduct security audits and support penetration testing initiatives.
- Resolve production authentication and API gateway complications.
- Enhance API performance, scalability, and system reliability.
- Document IAM and API gateway configurations comprehensively.
- Guide junior developers through code reviews emphasizing security and performance.
Required Qualifications
- 6–8 years IT experience; minimum 4–5 years in IAM & API Gateway.
- 3+ years hands-on Auth0 experience.
- 3+ years hands-on Kong experience.
- Enterprise-scale authentication systems background.
- Bachelor's degree in Computer Science, Engineering, or an equivalent field.
Preferred Qualifications
- Zero Trust Architecture knowledge.
- Keycloak, Okta, or Azure AD familiarity.
- Healthcare, Banking, or Financial compliance experience (HIPAA, PCI-DSS, SOC 2).
- Event-driven architecture and API monetization knowledge.
- Logging and monitoring tools expertise (ELK, Prometheus, Grafana).