CIAM ARCHITECT

$137,000 - $150,000/Yr

The Judge Group - Sacramento, CA

Full-time - Mid Level

Remote - Sacramento, CA

Administrative and Support Services

About the position

The CIAM Architect is responsible for leading the Customer Identity and Access Management (CIAM) initiatives for a Credit Union, focusing on designing, implementing, and managing CIAM solutions to ensure secure and seamless member experiences across digital platforms. This role requires collaboration with internal stakeholders and vendor partners to manage user identities, access controls, and authentication processes, while maintaining regulatory compliance and delivering solutions that meet business objectives.

Responsibilities

• Stay updated on emerging trends, technologies, and best practices in CIAM, security, and identity management through self-study, training, and industry forums.
• Develop and design CIAM solutions that integrate with existing identity and access management systems, working with internal infrastructure, application, business, and external third-party teams for identity-related integrations.
• Ensure the architecture supports scalability and performance for handling large volumes of customer identities.
• Create seamless user experiences for customer registration, login, and account management.
• Design multi-factor authentication (MFA) and adaptive authentication mechanisms to enhance security.
• Monitor system performance and user activity to identify and address potential security threats or usability issues.
• Regularly update and maintain the CIAM system to adapt to changing business needs and technological advancements.
• Create documentation for system architecture, processes, and user guides.
• Provide training and support to teams using the CIAM system to ensure effective implementation and usage.
• Work with cross-functional teams, including developers, security experts, and business stakeholders, to align CIAM solutions with organizational goals.

Requirements

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field is preferred.
• 5-7 years of experience in Information Technology, focusing on customer identity and access management.
• Experience in the financial services industry is strongly preferred.
• Proven experience leading CIAM implementation projects, including requirements analysis, solution design, implementation, testing, and deployment, with strong project management skills.
• Hands-on experience with PingOne Advanced Identity Cloud (formerly ForgeRock Identity Cloud) is required.
• Proficiency in identity protocols and standards (OAuth, OpenID Connect, SAML, LDAP, SCIM), CIAM platforms (ForgeRock/Ping), and integration technologies (APIs, SDKs).
• Deep understanding of cybersecurity and IAM principles, including authentication methods, authorization, federation, access control mechanisms, encryption, and secure coding practices.
• Knowledge of privacy regulations (e.g., GDPR, CCPA) and industry standards (e.g., ISO 27001, NIST) related to customer data protection and compliance.
• Excellent verbal and written communication skills, with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to analyze complex issues, identify root causes, and propose effective solutions.

Nice-to-haves

• Agile environment experience and scrum methodology are preferred.