Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations
Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
Design and implementation of custom MFA and risk‑based authentication flows.
Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models
Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
Ability to perform authentication and authorization threat modeling
Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).
