Auth0 / Customer Identity Specialist

We are looking for a skilled Identity and Access Management (IAM) specialist to join our team and take ownership of implementing, configuring, and supporting Auth0 solutions focused on Customer Identity and Access Management (CIAM) within the banking and financial services sector. This role demands hands-on expertise in real-time troubleshooting of customer authentication challenges and a deep understanding of customer identity platforms, particularly Auth0. The successful candidate will play a critical role in ensuring secure and seamless authentication experiences for customer-facing applications while adhering to industry security standards.

Key Responsibilities
Implement and configure Auth0 Customer Identity modules such as Universal Login, connections, Multi-Factor Authentication (MFA), Actions/extensibility, attack protection, and logging. Design and support OAuth 2.0 and OpenID Connect flows to enable secure authentication for customer-facing applications. Troubleshoot and debug customer identity issues in real time, demonstrating strong knowledge of JSON Web Tokens (JWT), including claims, signatures, expiry, audience/issuer validation, and the behavior of access and refresh tokens. Apply and support Financial-grade API (FAPI) 2.0 aligned authentication and authorization patterns to meet stringent security requirements. Integrate Auth0 with APIs, applications, and identity federation/Single Sign-On (SSO) solutions as needed. Develop and maintain identity runbooks, playbooks, and process documentation to ensure operational excellence. Support audit and compliance activities by collecting evidence related to customer authentication and access controls. Escalate and coordinate critical customer identity events with senior leadership to ensure timely resolution and effective communication.

Required Qualifications
A minimum of 6 years of experience in IAM or identity security, with at least 3 to 5 years of hands-on experience implementing and supporting Auth0 Customer Identity solutions. Proven ability to debug and resolve production-level customer authentication and token issues under time-sensitive conditions. Experience working with banking, financial services, and insurance (BFSI) clients is preferred, reflecting familiarity with industry-specific compliance and security requirements. Strong technical expertise in Auth0 CIAM, JSON Web Tokens (JWT), OAuth 2.0, OpenID Connect, and FAPI 2.0 standards. In-depth understanding of MFA, Proof Key for Code Exchange (PKCE), token and session lifecycle management, and secure client authentication patterns. Experience with identity federation and Single Sign-On (SSO) as applied to customer identity management. Solid knowledge of API security fundamentals related to customer authentication.

Preferred Qualifications and Benefits
Relevant certifications in Auth0 or Okta identity platforms are highly desirable. Additional experience with cloud identity platforms such as Microsoft Entra ID or Azure AD B2C is considered a plus. The position is based in Bengaluru or another ThoughtFocus India delivery location, supporting a US banking client account. Employment will be India-based with ThoughtFocus, offering the opportunity to work on critical financial services projects. This role provides a unique opportunity to work at the intersection of advanced identity technology and the highly regulated banking sector, making it an exciting and rewarding challenge for experienced IAM professionals.