> Markdown version of [/jobs/ext/2625480-senior-engineer-iam-platform-engineering](https://www.wearedevelopers.com/jobs/ext/2625480-senior-engineer-iam-platform-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Engineer, IAM Platform Engineering - **Company:** Cencora - **Location:** Conshohocken, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Amazon Web Services, User Authentication, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Cyber Security, Customer Data Management, Multi-Factor Authentication, Fraud Prevention and Detection, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Ping (Networking Utility), Windows PowerShell, Openid Connect, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), SAP (Applications), Single Sign-On, Software Engineering, Scripting, Google Cloud, Okta, Customer Identity Access Management, Information Technology, Restful APIs, Api Management, Serverless Computing - **Published:** August 20, 2026 - **Apply:** https://myhrabc.wd5.myworkdayjobs.com/Global/job/Conshohocken-PA/Senior-Engineer--IAM-Platform-Engineering_R2613955 ## About the Role * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related field, or equivalent experience. * 5+ years of experience in Customer Identity and Access Management (CIAM), Identity and Access Management (IAM), software engineering, platform engineering, or related technical disciplines. * Hands-on experience implementing or supporting CIAM platforms such as Auth0, Okta Customer Identity, ForgeRock, Ping Identity, Microsoft Entra External ID, SAP Customer Data Cloud, or similar technologies. * Strong understanding of authentication and authorization protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, JWT, and federation services. * Experience integrating customer-facing applications with identity platforms through APIs, SDKs, and cloud-native services. * Experience troubleshooting complex authentication, registration, federation, and customer access issues. * Knowledge of customer identity security, identity lifecycle management, fraud prevention, and Zero Trust security principles. * Experience developing automation solutions using scripting languages such as PowerShell, Python, JavaScript, or similar technologies., * Experience supporting high-volume customer authentication environments serving external users across web, mobile, and API channels. * Experience with customer profile management, consent management, social login, and customer lifecycle management capabilities. * Familiarity with privacy regulations and compliance frameworks including GDPR, CCPA, HIPAA, or similar standards. * Experience with public cloud platforms including Microsoft Azure, AWS, or Google Cloud. * Certifications such as Okta Certified Professional, ForgeRock Certification, Microsoft Identity and Access Administrator, Security+, CISSP, or equivalent., We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora ## Description The CIAM Platform Engineer III is a senior-level engineer responsible for designing, implementing, and optimizing Customer Identity and Access Management (CIAM) solutions that deliver secure, scalable, and seamless digital experiences for customers, patients, partners, and other external users. This role serves as a technical lead for customer identity initiatives, driving platform engineering, authentication services, API integrations, automation, and security improvements across customer-facing applications. The CIAM Platform Engineer III partners with software engineering, product, cybersecurity, architecture, and business teams to deliver modern identity capabilities including registration, authentication, authorization, consent management, customer profile management, Single Sign-On (SSO), Multi-Factor Authentication (MFA), social login, and identity federation. This role plays a key part in advancing customer identity strategy through automation, cloud-native architectures, and industry-leading security practices., * Designs, implements, and supports enterprise CIAM platforms that provide secure, scalable, and highly available customer authentication and authorization services. * Engineers customer identity solutions supporting registration, profile management, account recovery, consent management, customer lifecycle management, and secure access to digital applications. * Develops and maintains integrations between CIAM platforms and customer-facing applications using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, REST APIs, and modern identity standards. * Leads the implementation of authentication capabilities including Single Sign-On (SSO), Multi-Factor Authentication (MFA), adaptive authentication, social identity providers, federation services, and passwordless authentication. * Designs and maintains automation solutions that streamline customer onboarding, application onboarding, identity orchestration, access management, and operational support processes. * Analyzes authentication telemetry, platform performance metrics, customer login trends, and security events to proactively identify and resolve service issues, fraud risks, and user experience challenges. * Troubleshoots complex customer authentication, federation, authorization, and integration issues across cloud and hybrid environments. * Creates and maintains architecture documentation, integration standards, technical specifications, operational procedures, and platform runbooks. * Participates in platform upgrades, migrations, patching activities, and release validation efforts to ensure platform stability, resilience, and security. * Collaborates with application development teams to integrate customer identity services into web, mobile, API, and SaaS applications. * Partners with security and privacy teams to implement Zero Trust principles, customer identity protection controls, and compliance requirements. * Provides technical guidance and mentorship to junior engineers while promoting CIAM engineering best practices and operational excellence. * Evaluates emerging identity technologies, authentication methods, and customer security capabilities to drive continuous improvement across the CIAM platform. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Beyond the 9–5: Designing Work Around Humans](https://www.wearedevelopers.com/videos/1321-beyond-the-9-5-designing-work-around-humans) ## Related Articles - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)