Software Engineer SSO & Identity : Remote

Software Engineer SSO & Identity
Location: 100% Remote Duration: Contract (C2H)
Job Summary
Dedicated resource supporting all SSO-related configuration work across the next-generation member onboarding platform, including migrations, new integrations, certificate renewals, and incident resolution.
Responsibilities

• Configure Auth0 applications using SAML and OIDC for new sponsor onboardings.
• Execute Auth0 SSO migrations per sponsor, including testing and cutover.
• Build and maintain new SSO integrations (e.g., HCSC connections, PingFederate, Lynx SP).
• Manage SSO certificate renewals and certificate rotation schedules.
• Troubleshoot and resolve SSO outages using Auth0 logs, SAML tracing, and connection debugging.
• Maintain Auth0 tenant configuration as code (YAML/JSON exports managed in GitHub).
• Support Auth0 Post-Login Actions development and maintenance.

Required Skills

• Strong experience with Auth0 (Tenant Configuration, Applications, Connections, Actions, Rules).
• Hands-on experience with SAML 2.0 (SP-initiated, IdP-initiated, metadata exchange, certificate management).
• Experience with OIDC/OAuth 2.0 (Authorization Code Flow, PKCE, Token Handling).
• Experience in Node.js or TypeScript (Auth0 Actions and proxy services).
• Knowledge of MongoDB (User Profile Store), Next.js/React.
• Good understanding of enterprise SSO concepts.

Nice to Have

• Experience with PingFederate, Azure AD B2C, Okta (Federated IdP integrations).
• Experience with enterprise-scale SSO onboarding (50+ SAML connections).

KPIs

• Deliver new sponsor SSO integrations within agreed timelines.
• Complete certificate renewals with zero downtime.
• Maintain Mean Time to Resolve (MTTR) for SSO incidents under 4 hours.

Key Technologies

• Auth0
• SAML 2.0
• OIDC
• OAuth 2.0
• Node.js
• TypeScript
• MongoDB
• Next.js
• React
• GitHub
• PingFederate
• Azure AD B2C
• Okta