ABOUT APPLY DIGITAL

Apply Digital is a global digital transformation partner for change agents. Leveraging expertise that spans Business Transformation Strategy, Product Design & Development, Commerce, Platform Engineering, Data Intelligence, Marketing Services, Change Management, and beyond, we enable our clients to modernize their organizations and deliver meaningful impact to their business and customers.
Our 750+ team members have helped transform global companies like Kraft Heinz, NFL, Moderna, Lululemon, Dropbox, Atlassian, A+E Networks, and The Very Group.
Apply Digital was founded in 2016 in Vancouver, Canada. In the past nine years, we have grown to nine cities across North America, South America, the UK, and Europe.
At Apply Digital, we believe in the “One Team” approach, where we operate within a ‘pod’ structure. Each pod brings together senior leadership, subject matter experts, and cross-functional skill sets, all working within a common tech and delivery framework. This structure is underpinned by well-oiled scrum and sprint cadences, keeping teams in step to release often and retrospectives to ensure we progress toward the desired outcomes.
Wherever we work in the world, we envision Apply Digital as a safe, empowered, respectful and fun community for people, every single day. Together, we work to embody our SHAPE (smart, humble, active, positive, and excellent) values and make Apply Digital a space for our team to connect, grow, and support each other to make a difference.
Visit our Careers page to learn how we can unlock your potential.
LOCATION: Apply Digital is hybrid/remote friendly. The preferred candidate should be based in either the Greater Toronto Area or the Greater Vancouver Area of Canada, working in hours that align to ET (Eastern Timezone) or PT (Pacific Timezone).

REQUIREMENTS:

• Strong problem-solving skills across the stack in the context of identity and security.
• Hands-on experience with at least one central CIAM platform (e.g., Okta, Auth0, Ping Identity, SAP CDC).
• Practical experience with key identity standards (OAuth 2.0, OIDC, SAML 2.0) and security best practices (e.g., token handling, session management).
• Familiarity with key IAM capabilities: SSO, MFA, federation, user provisioning/lifecycle, and directory integrations.
• Proficiency in developing NextJS/React UIs for User Authentication flows, including sign-in, sign-up, and sign-out flows.
• Experience in developing authentication and authorization middleware and checks within NestJS or similar frameworks.
• Experience deploying CIAM integrations in cloud environments (AWS, GCP, Azure).Comfortable with communicating and collaborating with remote, distributed teamsComfort translating complex IAM concepts for technical audiences.
• Interest in continuous learning and evolving toward broader platform responsibilities.
• Familiarity with Agile development experience.

THE ROLE:

Apply Digital seeks an Intermediate Engineer specializing in Customer Identity and Access Management (IAM). This role is a part of our Platforms Practice and is focused on implementing, configuring, and integrating enterprise-grade identity solutions. Your work will contribute to secure, scalable, and seamless access management solutions across the digital experiences we create for our clients. The ideal candidate has significant hands-on experience with leading IAM platforms. Familiarity with providers such as Okta, Auth0, SAP Customer Data Cloud (Gigya), and Ping Identity. You will bring a strong understanding of identity protocols, security best practices, and system integration to develop and manage robust IAM solutions. This role requires a strong understanding of implementing secure, compliant, and high-performing identity solutions across the stack and platforms. Additionally, excellent communication and collaboration skills within a remote setting are essential. While specialization in IAM is highly valued for immediate project impact, for those interested in full-time employment, this position also offers a path to grow into a broader Platforms Engineer generalist role within our supportive practice environment.

RESPONSIBILITIES:

• Develop enterprise-grade CIAM solutions for secure and seamless user experiences (e.g., registration, login, profile management, session handling).
• Configure authentication and authorization workflows, including SSO, MFA, social login, passwordless options (e.g., FIDO2/WebAuthn), and OAuth 2.0/OIDC.
• Implement privacy and compliance features (e.g., consent and preference management).
• Integrate CIAM platforms with front-end apps (web/mobile), backend services, and APIs.
• Manage identity data securely and efficiently at scale, including connections to directories or customer databases.
• Troubleshoot complex identity issues and implement custom scripts or workflows to support integration and automation.
• Partner with development, security, and data/marketing teams to ensure cohesive, secure user journeys
• Keen knowledge management of best practices within the Platforms Practice.
• Ensure solutions comply with privacy regulations (GDPR, CCPA), security threats, and IAM platform advancements.
• Engage with platform vendors for support or roadmap alignment.