Software Engineer for CIAM

About the position

Join us as a Software Engineer for CIAM at Barclays, where you will bring to life a new digital platform capability, transforming and modernizing our digital estate to build a market-leading digital offering with customer experience at its heart. This is an exciting and key role, partnering with business aligned engineering and product teams, to ensure a collaborative team culture is at the heart of what we do.

Responsibilities

• Development and delivery of high-quality software solutions by using industry aligned programming languages, frameworks, and tools. Ensuring that code is scalable, maintainable, and optimized for performance.
• Cross-functional collaboration with product managers, designers, and other engineers to define software requirements, devise solution strategies, and ensure seamless integration and alignment with business objectives.
• Collaboration with peers, participate in code reviews, and promote a culture of code quality and knowledge sharing.
• Stay informed of industry technology trends and innovations and actively contribute to the organization's technology communities to foster a culture of technical excellence and growth.
• Adherence to secure coding practices to mitigate vulnerabilities, protect sensitive data, and ensure secure software solutions.
• Implementation of effective unit testing practices to ensure proper code design, readability, and reliability.

Requirements

• Strong hands-on IAM engineer background with broad expertise across the IAM domain, including tooling, products, protocols, taxonomy, identity management, authentication, authorization, and identity federation.
• Expertise with single sign on, OAuth2, OIDC, PKI, PSD2 SCA knowledge and possession-based authentication.
• ForgeRock developer experience with PingGateway, PingAM, PingIDM and PingDS, including JavaScript coding of PingGateway scripted routes, and PingAM authentication tree nodes.
• Strong hands-on coding across either JavaScript or Java, and you must be comfortable in designing extensible IAM APIs for seamless integration with external and internal applications.
• Considerable working knowledge of implementing PingAM custom authentication trees, including downstream API integration with threat sensors (ThreatMetrix, BioCatch, etc.), adaptive authentication and step-up authentication, including the ability to implement data links between internal and external LDAPS, JDBC, SOAP, HTTPS, and other data sources.

Nice-to-haves

• Experience in implementing PingGateway single-sign-on routes, dynamic proxies, and filter chains, or implementing PingIDM based data links.
• Experience in partnering with security, product, engineering, and compliance teams, to embed identity-first principles into the DevSecOps lifecycle.