Innover - Lead Software Engineer - CIAM Platform (7-9 yrs)

About the Role :

We are seeking a highly experienced and technically proficient Lead Software Engineer to take ownership of a critical user migration initiative within our SafeSend product ecosystem. This role involves leading the strategic migration from the legacy SafeSend Identity Server (MS Identity v4) to a modern Customer Identity and Access Management (CIAM) platform.

As the technical lead, you will be responsible for planning, designing, implementing, and automating the migration process, ensuring a seamless user experience, enhanced security, and improved scalability. You will collaborate closely with cross-functional teams across engineering, DevOps, QA, and product management.

Key Responsibilities :

- Lead and manage the end-to-end migration process of SafeSend users to the new CIAM platform.

- Architect the replacement of the existing MS Identity Server v4 with a scalable and secure CIAM solution (e.g., Azure AD B2C, Auth0, Okta, or equivalent).

- Design, document, and implement detailed migration strategies, including phased rollouts, data transformation, and user provisioning.

- Develop custom .NET Core applications and services to support integration with the CIAM platform and ensure interoperability with existing product components.

- Automate migration workflows to support high-volume, error-resistant transitions using scripts, APIs, and cloud automation tools.

- Establish monitoring, logging, and rollback mechanisms to minimize risk and ensure reliability.

- Define and enforce security best practices, focusing on OAuth2, OIDC, SSO, token lifecycles, and identity federation.

- Collaborate with QA teams to develop test plans for validation and regression testing of migrated user accounts.

- Provide technical leadership, mentorship, and code reviews for a small team of developers involved in the migration.

- Act as the subject matter expert for authentication and identity services during the transition and post-migration support phases.

Required Skills and Qualifications :

- Strong experience working with Azure Cloud Services, including Azure AD B2C, Key Vault, App Services, and Azure Functions.

- Proficiency in REST API design and development, including secure API practices and versioning strategies.

- In-depth knowledge of OAuth2, OpenID Connect, SSO, and modern identity/authentication protocols.

- Hands-on experience with Microsoft Identity Server (version 4 or higher), including its configuration, customization, and limitations.

- Demonstrated experience leading or participating in CIAM or IAM migration projects.

- Strong understanding of SQL Server/MSQL, including schema design, migrations, and data mapping.

- Familiarity with DevOps practices and CI/CD pipelines, especially in Azure DevOps or GitHub Actions.

- Excellent documentation skills and the ability to translate complex workflows into actionable implementation steps.

- Strong problem-solving, communication, and leadership skills.