TELECOMMUTE Sr. IAM Engineer - SSO Identity (OAuth) - Healthcare

• Configure Auth0 Applications (SAML, OIDC) for new sponsor onboardings (Next-gen member onboarding platform - OB3 pipeline)

• Execute OB2 $B*(J Auth0 SSO migrations per sponsor, including testing and cutover

• Build and maintain new SSO integrations (e.g., HCSC connections, PingFederate, Lynx SP)

• Manage SSO certificate renewals and rotation schedules

• Troubleshoot and resolve SSO outages (Auth0 logs, SAML trace, connection debugging)

• Maintain Auth0 tenant configuration as code (YAML/JSON exports, GitHub-managed)

• Support Auth0 Post-Login Actions development and maintenance

• Must have: Auth0 platform (tenant config, Applications, Connections, Actions, Rules)

• Must have: SAML 2.0 protocol (SP-initiated, IdP-initiated, metadata exchange, certificate management)

• Must have: OIDC / OAuth 2.0 (authorization code flow, PKCE, token handling)

• Must have: Node.js or TypeScript (for Auth0 Actions and proxy services)

• Should have: MongoDB (user profile store), Next.js/React (OB3 frontend awareness)

• Nice to have: PingFederate, Azure AD B2C, Okta (for federated IdP integrations)

• Nice to have: Experience with enterprise SSO onboarding at scale (50+ SAML connections)

KPIs:

• New sponsor SSO integrations delivered within agreed timelines

• Certificate renewals completed with zero outage

• Mean time to resolve SSO incidents < 4 hours