Manulife is a leading international financial services provider, helping people make their decisions easier and lives better. They are seeking a Full-Stack Software Engineer to join their Customer identity & access management engineering team, focusing on building secure authentication and authorization experiences across digital channels using IBM Security Verify.

Responsibilities

• Implement and maintain CIAM features: registration, login, MFA, account recovery, consent, and profile management using IBM Security Verify
• Build and update Node.js/TypeScript APIs and microservices (Express or NestJS) for auth and user profile flows
• Develop React components/pages for authentication UX (hosted pages and embedded widgets) with accessibility and performance in mind
• Integrate with IBM Security Verify: configure applications, policies, user directories, branding, and hooks; assist with SSO and social login setups
• Apply standards and best practices for OAuth 2.0, OIDC, and JWT (including PKCE) across web and mobile flows
• Implement secure session and token handling; contribute to CSRF/XSS/CORS mitigations and secure cookie management
• Write tests (unit/integration/e2e) and participate in code reviews; document features and runbooks
• Support CI/CD pipelines, environment configuration, and monitoring for identity services
• Troubleshoot issues, triage bugs, and assist in root-cause analysis with senior guidance

Skills

• 1–2 years of software development experience (internships/co-ops included) or strong project-based portfolio
• Proficiency in JavaScript/TypeScript, Node.js (Express/NestJS), and React (Hooks, Context; basic state management)
• Basic understanding of OAuth 2.0, OIDC, JWT, and web auth flows (authorization code + PKCE)
• Familiarity with REST APIs, JSON, and front-end routing (React Router or Next.js)
• Knowledge of core web security concepts: XSS, CSRF, CORS, secure cookies
• Experience with Git and CI/CD basics (GitHub Actions, GitLab CI, or Azure DevOps)
• Strong problem-solving, willingness to learn, and attention to detail
• Exposure to IBM Security Verify (CIAM) configuration: apps, policies, MFA, branding, and user management
• Experience with MFA methods (TOTP, push, SMS/email) and WebAuthn/passkeys
• Understanding of accessibility (WCAG) and performance tooling (Lighthouse)
• Familiarity with cloud platforms (AWS/Azure/GCP), Docker, and Terraform basics
• Experience with testing tools: Jest, React Testing Library, Cypress, Postman
• Hands-on mentorship in IBM Security Verify: tenant configuration, app integration, policies, flows, and SDKs
• Secure auth design: PKCE, token lifecycles, session management, and adaptive MFA
• Building observable services (logging, metrics, alerts) and contributing to reliability
• Conversion-focused auth UX with analytics to improve registration/login funnels
• IBM Security Verify (CIAM platform)
• Node.js, TypeScript, Express/NestJS
• React, Next.js, React Query/Redux (as needed)
• OAuth 2.0, OIDC, JWT, PKCE, WebAuthn/MFA
• GitHub/GitLab, CI/CD, Docker; AWS/Azure/GCP (intro level)
• Jest, React Testing Library, Cypress, Postman, OpenAPI/Swagger
• Growth mindset, curiosity, and ability to take feedback
• Clear communication and collaboration with cross-functional teams
• Ownership of tasks, reliable delivery, and documentation habits

Benefits

• Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.
• Manulife/John Hancock offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans.
• We also offer eligible employees various retirement savings plans (including pension/401(k) savings plans and a global share ownership plan with employer matching contributions) and financial education and counseling resources.
• Our generous paid time off program in the U.S. includes up to 11 paid holidays, 3 personal days, 150 hours of vacation, and 40 hours of sick time (or more where required by law) each year, and we offer the full range of statutory leaves of absence.

Company Overview

Company H1B Sponsorship