Senior Authorization Engineer

Senior Authorization Engineer - (IAM/Oauth/JWT) at KMS Technology, Inc. Company Description At KMS Technology, we are dedicated to delivering cutting‑edge solutions and services that empower businesses to achieve their goals. Our team consists of highly skilled professionals passionate about technology and innovation, providing a dynamic and collaborative work environment for career growth and significant impact. Job Description We're looking for a highly skilled Senior Authorization Engineer to join our Operations team. This critical role focuses on maintaining the integrity, availability, and security of our core platform’s authentication and authorization systems. The successful candidate will be the primary administrator for our Identity and Access Management (IAM) infrastructure, responsible for configuration, monitoring, and troubleshooting of systems that rely on modern protocols such as OAuth 2.0, OpenID Connect (OIDC), and JSON Web Tokens (JWT) to secure access for our millions of learners and business customers. Responsibilities Design, implement, and maintain the infrastructure supporting the company’s identity providers and directories (e.g., Active Directory, LDAP, Okta, Auth0). Own the configuration and enforcement of authentication and authorization policies across microservices, leveraging OAuth 2.0, OIDC, and JWT. Develop and manage automation scripts (Python, PowerShell, Bash) for routine system health checks, user provisioning, and access reviews. Manage the lifecycle of certificates, secrets, and encryption keys for secure communications and token signing. Administer and maintain high‑availability Linux and Windows server environments in the cloud (Azure/AWS). Proactively monitor system performance, security logs, and error reporting related to access control and authentication failures. Troubleshoot complex, multi‑system authentication and authorization issues, working closely with engineering teams to resolve security incidents quickly. Ensure all identity and infrastructure configurations comply with internal security standards and external regulatory requirements. Create and maintain detailed documentation for IAM architectures, operational procedures, runbooks, and troubleshooting guides. Collaborate with Development teams to integrate new applications and services into the existing centralized authentication framework. Qualifications Minimum 5+ years of professional experience in Systems Administration, DevOps, or Security Engineering with a focus on IAM. Expert practical knowledge of OAuth 2.0 and OpenID Connect (OIDC), including various grant types. Deep familiarity with the structure, validation, and security implications of JSON Web Tokens (JWT). Proven experience administering identity providers (e.g., Okta, Azure AD). Strong hands‑on experience managing and securing operating systems (Linux/Windows) in a major cloud environment (Azure or AWS). Proficiency in scripting or programming for automation (Python, Bash, PowerShell). Familiarity with containerization (Docker) and configuration management tools (Terraform, Ansible). Preferred Skills Experience in a heavily regulated environment (finance, healthcare). Certifications such as Microsoft Azure Security Engineer (AZ‑500) or equivalent. Experience with API Gateway management and applying token validation at the gateway level. Additional Information – Perks (Mexico) Mexican law benefits. 15 days of PTO (first year onward 3 days per year). 5 days’ leave for immediate family death, negotiable. Major Medical Expenses Insurance covering immediate dependents. Annual performance bonus (~10% of annualized salary). Annual salary adjustment. Employee referral bonus. Paid certifications / courses. Coursera license. 5% savings fund. 5% grocery vouchers. Seniority level Executive Employment type Full‑time Job function Engineering and Information Technology / Software Development Referrals increase your chances of interviewing at KMS Technology, Inc. by 2x. #J-18808-Ljbffr