Software Engineer (Full-Stack)
Vancouver / Toronto
Technology /
Full-Time Permanent /
On-site
ABOUT APPLY DIGITAL
Apply Digital is a global digital transformation partner for change agents. Leveraging expertise that spans Business Transformation Strategy, Product Design & Development, Commerce, Platform Engineering, Data Intelligence, Marketing Services, Change Management, and beyond, we enable our clients to modernize their organizations and deliver meaningful impact to their business and customers.
Our 750+ team members have helped transform global companies like Kraft Heinz, NFL, Moderna, Lululemon, Dropbox, Atlassian, A+E Networks, and The Very Group.
Apply Digital was founded in 2016 in Vancouver, Canada. In the past nine years, we have grown to nine cities across North America, South America, the UK, and Europe.
At Apply Digital, we believe in the “One Team” approach, where we operate within a ‘pod’ structure. Each pod brings together senior leadership, subject matter experts, and cross-functional skill sets, all working within a common tech and delivery framework. This structure is underpinned by well-oiled scrum and sprint cadences, keeping teams in step to release often and retrospectives to ensure we progress toward the desired outcomes.
Wherever we work in the world, we envision Apply Digital as a safe, empowered, respectful and fun community for people, every single day. Together, we work to embody our SHAPE (smart, humble, active, positive, and excellent) values and make Apply Digital a space for our team to connect, grow, and support each other to make a difference.
LOCATION: Apply Digital is hybrid/remote friendly. The preferred candidate should be based in either the Greater Toronto Area or the Greater Vancouver Area of Canada, working in hours that align to ET (Eastern Timezone) or PT (Pacific Timezone).
THE ROLE:
Apply Digital seeks an Intermediate Engineer specializing in Customer Identity and Access Management (IAM). This role is a part of our Platforms Practice and is focused on implementing, configuring, and integrating enterprise-grade identity solutions. Your work will contribute to secure, scalable, and seamless access management solutions across the digital experiences we create for our clients. The ideal candidate has significant hands-on experience with leading IAM platforms. Familiarity with providers such as Okta, Auth0, SAP Customer Data Cloud (Gigya), and Ping Identity. You will bring a strong understanding of identity protocols, security best practices, and system integration to develop and manage robust IAM solutions. This role requires a strong understanding of implementing secure, compliant, and high-performing identity solutions across the stack and platforms. Additionally, excellent communication and collaboration skills within a remote setting are essential. While specialization in IAM is highly valued for immediate project impact, for those interested in full-time employment, this position also offers a path to grow into a broader Platforms Engineer generalist role within our supportive practice environment.
Responsibilities:
- Develop enterprise-grade CIAM solutions for secure and seamless user experiences (e.g., registration, login, profile management, session handling).
- Configure authentication and authorization workflows, including SSO, MFA, social login, passwordless options (e.g., FIDO2/WebAuthn), and OAuth 2.0/OIDC.
- Implement privacy and compliance features (e.g., consent and preference management).
- Integrate CIAM platforms with front-end apps (web/mobile), backend services, and APIs.
- Manage identity data securely and efficiently at scale, including connections to directories or customer databases.
- Troubleshoot complex identity issues and implement custom scripts or workflows to support integration and automation.
- Partner with development, security, and data/marketing teams to ensure cohesive, secure user journeys
- Keen knowledge management of best practices within the Platforms Practice.
- Ensure solutions comply with privacy regulations (GDPR, CCPA), security threats, and IAM platform advancements.
- Engage with platform vendors for support or roadmap alignment.
Requirements:
- Strong problem-solving skills across the stack in the context of identity and security.
- Hands-on experience with at least one central CIAM platform (e.g., Okta, Auth0, Ping Identity, SAP CDC).
- Practical experience with key identity standards (OAuth 2.0, OIDC, SAML 2.0) and security best practices (e.g., token handling, session management).
- Familiarity with key IAM capabilities: SSO, MFA, federation, user provisioning/lifecycle, and directory integrations.
- Proficiency in developing NextJS/React UIs for User Authentication flows, including sign-in, sign-up, and sign-out flows.
- Experience in developing authentication and authorization middleware and checks within NestJS or similar frameworks.
- Experience deploying CIAM integrations in cloud environments (AWS, GCP, Azure).Comfortable with communicating and collaborating with remote, distributed teamsComfort translating complex IAM concepts for technical audiences.
- Interest in continuous learning and evolving toward broader platform responsibilities.
- Familiarity with Agile development experience.
Nice To Haves:
- NICE TO HAVESUnderstanding of 2FA/MFA user flows across both mobile and webFamiliarity with AWS Lambdas/RestifyIAM platform certifications (e.g., Okta, PingIdentity).
- Experience with CIAM features like progressive profiling or consent management.
- Familiarity with Privileged Access Management (PAM), API security gateways (e.g., Apigee, Kong), or IaC tools (e.g., Terraform).
- Understanding of identity-related compliance and identity data migration.
- Strong knowledge of directory architecture and LDAP concepts.
#LI-Remote #LI-FS1
LIFE AT APPLY DIGITAL
At Apply Digital, people are at the core of everything we do. We value your time, safety, and health, and strive to build a work community that can help you thrive and grow. Here are a few benefits we offer to support you:
Great projects: Broaden your skills on a range of engaging projects with international brands that have a global impact.
An inclusive and safe environment: We’re truly committed to building a culture where you are celebrated and everyone feels welcome and safe.
Learning opportunities: We offer generous training budgets, including partner tech certifications, custom learning plans, workshops, mentorship, and peer support.
Generous vacation policy: Work-life balance is key to our team’s success, so we offer flexible personal time offer (PTO); allowing ample time away from work to promote overall well-being.
Customizable benefits: Tailor your extended health and dental plan to your needs, priorities, and preferences.
Flexible work arrangements: We work in a variety of ways, from remote, to in-office, to a blend of both.
Apply Digital is committed to building a culture where differences are celebrated and everyone feels welcome. That’s why we value equal opportunity and nurture an inclusive workplace where our individual differences are recognized and valued.
For more information, visit the Diversity, Equity, and Inclusion (DEI) section of our website. If you have accommodation needs at this stage of the recruitment process, please inform us as soon as possible by emailing us at careers@applydigital.com.
