Federated Authentication Engineer - OESIS Framework

📋 Description

• Design and implement OAuth2/OIDC flows per platform: (For example: CrowdStrike API
• Implement SAML 2.0-based federation for enterprise SSO passthrough scenarios where a customer's
• Build secure, multi-tenant credential and token storage with rotation, integrating with secrets
• Design the "passthrough" auth architecture so the embedded SDK authenticates to the customer's own
• Implement token refresh, expiry handling, and re-authentication logic that integrates cleanly with
• Define least-privilege scoping per platform and support certificate-based auth / mutual TLS where

🎯 Requirements

• 3+ years in identity/access engineering with hands-on OAuth2, OIDC, SAML 2.0, and ideally SCIM
• Direct experience with Microsoft Entra ID (Azure AD) app registrations and Graph API authentication
• Experience implementing OAuth2 client-credentials flows against third-party enterprise APIs (for
• Strong grasp of token lifecycle management: refresh tokens, expiry, revocation, scope/claim design
• Experience with secrets management and secure credential storage in multi-tenant SaaS environments
• Familiarity with certificate-based authentication (mTLS, client certificates)

🎁 Benefits

• It would be nice if you have: Prior experience building "passthrough" or delegated auth
• Background in enterprise IAM tooling (Okta, Ping Identity, Entra ID) or CIAM
• Familiarity with Zero Trust Network Access (ZTNA) and device posture or compliance
• Security certifications (CISSP, OSCP, or similar)
• Cybersecurity domain knowledge and software development experience
• Familiarity with Regulatory Compliance Data frameworks (like PCI-DSS, SOX, HIPPA, etc)