Security Token Service Engineer – Identity & Access Management (IAM)

Job not on LinkedIn

🔥 8 minutes ago

🇺🇸 United States – Remote

💵 $210k - $250k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 Field Service Engineer

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

VPS

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1922

📚 Education

🏛️ Government

🔒 Cybersecurity

Education • Government • Cybersecurity

VPS is your trusted source for managed learning solutions, serving commercial, government, and military clients globally. With a focus on collaboration and leveraging learning technology, VPS delivers tailored curriculum development, training strategies, and efficient learning administration services. Their innovative approach ensures that organizations can enhance performance, upskill their workforce, and effectively navigate the complexities of modern training environments.

📋 Description

• Design, develop, implement, and maintain authentication and authorization services supporting enterprise applications and APIs • Build and operate token services supporting token issuance, exchange, validation, revocation, and introspection • Implement secure authentication and authorization flows using OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0 • Develop and maintain JWT validation and token management capabilities • Integrate enterprise identity providers including Microsoft Entra ID, ADFS, and SiteMinder • Configure and integrate Keycloak as an identity broker • Establish secure federation and single sign-on capabilities • Troubleshoot complex authentication, federation, and authorization issues • Implement authorization enforcement at API gateways using PDP and PEP architectural patterns • Develop and integrate secure access controls for APIs, applications, and backend services • Collaborate with platform and software engineering teams to integrate identity services into reusable enterprise capabilities • Manage credential and cryptographic key lifecycles, including client secrets, signing keys, rotation, and secure storage • Implement and maintain PKI and certificate trust configurations • Support X.509 certificates, CA chains, TLS/mTLS, certificate issuance, renewal, and revocation • Document identity architectures, authentication flows, authorization models, and security integrations • Collaborate with cybersecurity, platform engineering, and development teams • Support security assessments, technical reviews, audits, and authorization documentation • Contribute to scalable, reusable, and maintainable identity security solutions

🎯 Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related technical field, or equivalent professional experience • Minimum of 3 years of hands-on experience in Identity & Access Management engineering • Experience implementing OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0 authentication and federation flows • Hands-on experience with token exchange, JWT validation, and token-based authentication • Experience integrating at least one enterprise identity provider, such as Microsoft Entra ID, ADFS, or SiteMinder • Experience with Keycloak or a comparable identity broker • Working knowledge of Public Key Infrastructure (PKI), X.509 certificates, and TLS/mTLS • Proficiency developing backend services using Java, Go, Python, or a comparable programming language • Strong troubleshooting, technical documentation, and problem-solving skills • Ability to collaborate effectively with software engineers, cloud architects, and cybersecurity professionals • New hires assigned on this project will be required to undergo and pass drug and alcohol tests per our client's contract requirements • U.S. citizenship status required • Preferred: Experience extending Keycloak using SPIs, custom authenticators, or custom integrations • Preferred: Experience implementing fine-grained authorization using Open Policy Agent (OPA) or comparable policy engines • Preferred: Familiarity with PDP and PEP architectures • Preferred: Experience with AWS KMS, HashiCorp Vault, HSMs, or comparable key management technologies • Preferred: Experience securing machine-to-machine communications, service accounts, and automated workloads • Preferred: Familiarity with Model Context Protocol (MCP) and authorization approaches for AI-enabled applications or agents • Preferred: Experience integrating identity and authorization services with API gateways • Preferred: Familiarity with NIST 800-53, NIST 800-63, FedRAMP, or security authorization processes • Preferred: Experience developing security services within AWS or other cloud environments • Preferred: Experience supporting enterprise modernization, platform engineering, or distributed application integration initiatives

🏖️ Benefits

• Ongoing learning and development opportunities • Competitive salaries • Health benefits • Flexible work arrangements • Benefits related to health, retirement, professional development, and more

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume