CIAM Engineer

About the team and position

:

Carvana's DevSecOps team builds and supports the greatest things you'd find in and around Carvana.com! This role ensures that our applications, services, and websites are designed and implemented with security by design, while also fortifying our security infrastructure. You will be responsible for discovering and addressing security risks, issues, and threats across the entire development lifecycle. This includes building security automation to enable secure development practices, evangelizing security with our engineering teams, and working closely with our Principal C# Engineer and Senior DevSecOps Engineer to fortify our Identity Provider (IdP) systems, manage edge security processes, and ensure the integrity of our microservices architecture.

What you'll be doing...

• Collaborate with infosec, appsec, engineering teams, product managers, and other stakeholders to solve complex auth and security challenges.
• Design, develop and deploy solutions to ensure that data, users’ identities, and authentication processes are secure and compliant with industry standards.
• Work with cloud systems, pipelines, and resources.
• Learn and implement the evolving security & authentication standards, technologies, approaches, and participate in bringing software engineering in Carvana to the next level.

What you should know...

• At least 4 years of software development, with consistently advancing skills and responsibilities
• Experience with microservice driven web application development
• Expert level knowledge of identity solutions and related integrations such as Okta, Auth0, Duende, and similar IdP platforms.
• Expert level knowledge of authentication and authorization standards, protocols, and frameworks such as OpenID, OAuth2, SAML, JWT, X.509, MTLS, DPoP and key related security concepts such as MFA.
• Strong level experience integrating applications with IdP providers for SSO.
• Experience implementing RBAC and ABAC models.
• Experience developing federations, integrations or customizations of the identity platforms needed to meet the business objectives.
• Experience conducting threat modeling and risk assessments of access systems, demonstrating clear ability to identify design flaws.
• Good communication and collaboration skills - Carvana developers work very closely with strong supporting teams and require great interpersonal skills including a positive attitude and sense of humor

It would also be great if you had...

• Understanding of .NET Core and C#
• Experience working in a cloud-based software development environment, preferably with Azure
• Experience in container-oriented architecture using Docker and Kubernetes
• Experience with reverse proxies such as Nginx, etc.
• Understanding of DevOps best practices and principles

What we’ll offer in return

• Be part of a forward-thinking team that values innovation and collaboration.
• Opportunity to work on cutting-edge technology solutions.
• Comprehensive compensation package including competitive salary, 401K with company match, a wide range of perks (such as student loan payments and vehicle discounts), and a robust wellness program.
• Extensive professional development opportunities including training.
• Scholarships and discounts for ASU Online.
• Culture of internal promotions in a dynamic, rapidly growing company.

Legal Stuff

Hiring is contingent on passing a complete background check. This role is eligible for visa sponsorship.