Customer Identity & Access Management (CIAM) Architect

Job Description
Customer Identity & Access Management (CIAM) Architect

Roles & Responsibilities
Lead the onboarding, integration, and implementation of customer-facing applications onto CIAM platforms such as Ping Identity and Strivacity. Define identity architecture, authentication, authorization, and customer lifecycle management solutions to deliver secure, scalable, and seamless digital experiences.

Key Responsibilities:

• Design and implement CIAM solutions using Ping Identity and Strivacity platforms.
• Lead application onboarding and migration to centralized CIAM services.
• Define authentication, authorization, SSO, MFA, federation, and passwordless access strategies.
• Integrate applications using OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and REST APIs.
• Collaborate with business, security, and development teams to gather requirements and define target architectures.
• Establish customer identity governance, access policies, and compliance controls.
• Support CIAM platform configuration, troubleshooting, and performance optimization.
• Develop onboarding standards, architecture patterns, and implementation best practices.
• Provide technical leadership during solution design, testing, and production deployment.

Required Skills:

• Strong experience with Ping Identity, Strivacity, or similar CIAM platforms.
• Expertise in OAuth 2.0, OIDC, SAML, MFA, federation, and identity lifecycle management.
• Experience integrating web, mobile, and API-based applications with CIAM solutions.
• Knowledge of cloud platforms, API security, and identity governance.
• Strong stakeholder management and solution architecture skills.

Preferred Experience:

• Experience in financial services, fintech, or regulated industries.
• Knowledge of customer onboarding, KYC, and digital identity verification processes.
• Relevant CIAM or identity certifications.