> Markdown version of [/jobs/ext/2646155-telecommute-sr-iam-engineer-sso-identity-oauth-healthcare](https://www.wearedevelopers.com/jobs/ext/2646155-telecommute-sr-iam-engineer-sso-identity-oauth-healthcare). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# TELECOMMUTE Sr. IAM Engineer - SSO Identity (OAuth) - Healthcare

- **Company:** Palni Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Software Debugging, Github, JSON, Lynx, MongoDB, Node.Js, OAuth, OpenID, Azure Active Directory, Next.js, Security Assertion Markup Language (SAML), TypeScript, YAML, SSL Certificate Management, Okta, ReactJS, Pingfederate, Front End Software Development
- **Published:** August 8, 2026
- **Apply:** https://www.dice.com/job-detail/0d36008c-8eca-48ff-82ea-e8a85642226b

## About the Role

* Must have: Auth0 platform (tenant config, Applications, Connections, Actions, Rules)

 * Must have: SAML 2.0 protocol (SP-initiated, IdP-initiated, metadata exchange, certificate management)

 * Must have: OIDC / OAuth 2.0 (authorization code flow, PKCE, token handling)

 * Must have: Node.js or TypeScript (for Auth0 Actions and proxy services)

 * Should have: MongoDB (user profile store), Next.js/React (OB3 frontend awareness)

 * Nice to have: PingFederate, Azure AD B2C, Okta (for federated IdP integrations)

 * Nice to have: Experience with enterprise SSO onboarding at scale (50+ SAML connections)

KPIs:

 * New sponsor SSO integrations delivered within agreed timelines

 * Certificate renewals completed with zero outage

 * Mean time to resolve SSO incidents < 4 hours

## Description

* Configure Auth0 Applications (SAML, OIDC) for new sponsor onboardings (Next-gen member onboarding platform - OB3 pipeline)

 * Execute OB2 $B*(J Auth0 SSO migrations per sponsor, including testing and cutover

 * Build and maintain new SSO integrations (e.g., HCSC connections, PingFederate, Lynx SP)

 * Manage SSO certificate renewals and rotation schedules

 * Troubleshoot and resolve SSO outages (Auth0 logs, SAML trace, connection debugging)

 * Maintain Auth0 tenant configuration as code (YAML/JSON exports, GitHub-managed)

 * Support Auth0 Post-Login Actions development and maintenance


## Related Videos

- [Lynx: Native for More](https://www.wearedevelopers.com/videos/1445-lynx-native-for-more)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [JSON and Beyond](https://www.wearedevelopers.com/videos/968-json-and-beyond)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Highest Paying Tech Companies in Europe](https://www.wearedevelopers.com/magazine/162-highest-paying-tech-companies-in-europe)