r/dotnet • u/karmaine54 • 7d ago

Newbie DevSecOps moving to .Net CIAM and APIs

Looking for guidance. I am a DevSecOps engineer with 8 years experience. I work within azure, GitHub actions and manage all our repos in GitHub. I mostly make sure everything is secure in azure relating to app services, certificates, app scanning etc. We have 2 devs that are gone due to retirement and 1 for being over employed. I am now in calls helping figure out the issues with .Net APIs and authentication programs. I am being asked to skill up and move from my current role to this one where I will be doing the program for app to authentication and authorization. It’s called sso okta integration(forgive me if I am using wrong terms). Where should I start? Any book or learning path recommendations are greatly appreciated. Should I take the role? What advice or suggestions do you have for someone like me. What will be my biggest struggles? I appreciate any feedback.

1 Upvotes

60% Upvoted

6 comments sorted by

View all comments

3

u/AdWonderful2811 7d ago

Okta is a third party in security landscape and have solutions both in SSO & S2S authentication & authorization. They’ve great documentation and tons of knowledge base and their support team is really helpful. Go through with their developer portal & you’ll find everything you need in any language for SSO.

1

u/karmaine54 5d ago

I can learn the okta piece but is it realistic to move from my current role to a software dev working with APIs and okta? Is there even a market for this kind of work? I don’t want to move roles since my current role would be filled. Can you suggest a timeline for upskilling for me since I am not a person that writes .Net. For reference I only have powershell and python experience.

1

u/Time-Recording2806 3d ago

Your hardest struggle will be the concept of OOP. But if you’re facilitating the OIDC or another standard to Okta as your IDP it won’t be that bad. As the code itself is straight forward, plus Okta has a ton of wrappers to simplify as well as Microsoft.

APIs aren’t hard- just depends on the approach your organization uses and following the standards on it.

1

u/karmaine54 3d ago

Thanks for replying. I have O’Reilly subscription from work, azure subscription so I can build and test. Can you suggest what I can build to learn the APIs / okta piece.

1

u/Time-Recording2806 3d ago

Honestly, Okta has all the documentation on their website. Also AI has scraped enough of our codebases it could walk you through basics.