Lead identity modernization and accelerate transition to a Zero Trust security model. The role involves the design, implementation, and evolution of the identity platform built on ForgeRock and PingOne.
Locations (2)
Andover, England, United Kingdom
Spain
Responsibilities
Design, build, and optimise identity services using ForgeRock/PingOne Advanced Identity Cloud
Create seamless authentication, registration, federation, and self-service user experiences
Develop secure integrations using SAML, OAuth2, OIDC, and SCIM
Build automation and CI/CD pipelines to accelerate and standardise IAM deployments
Implement identity governance, provisioning, and role-based access controls to support a Zero Trust architecture
Lead engineering role will serve as a GCS (Global Cyber Security) subject matter expert collaborating with the development, platform and architecture teams to implement and support various security related products.
Responsibilities
Leading the development, deployment and management of Access Management solutions.
The lead engineering role will serve as a GCS (Global Cyber Security) subject matter expert collaborating with the development, platform and architecture teams to implement and support various security related products.
Responsibilities
Leading the development, deployment and management of Access Management solutions.
Senior technical authority for security engineering in the Canada regulated environment, overseeing security controls, automation, and compliance across on‑premises, cloud, and isolated infrastructure.
Responsibilities
Serve as the senior technical authority for security engineering in the Canada regulated environment.
Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
Build automation and infrastructure‑as‑code that streamlines security engineering and operations, reporting, and remediation.
Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
Support security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities.
Principal Customer Identity Access Management (CIAM) Architect responsible for technical architecture and strategic leadership of Citizens' CIAM platform.
Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, Information Systems/Management, or related field; OR 4 years of relevant education and/or experience
The salary range for this position is $170,000 to $210,000 per year, plus an opportunity to earn additional incentive earnings.
Responsibilities
Define and evolve the target state architecture for Citizens' Customer Identity and Authentication ecosystem.
Establish enterprise architecture patterns and technical standards for customer authentication, authorization, federation, identity orchestration and identity lifecycle services.
Develop architecture supporting modern authentication capabilities including Passkeys, Passwordless Authentication, Multifactor Authentication, Adaptive Authentication, Risk Based Authentication and Identity Federation.
Provide architectural leadership across CIAM platforms and technologies including Ping Identity, ForgeRock, Okta, Auth0, Microsoft Entra ID or comparable enterprise identity platforms.
Define architecture patterns using OAuth 2.0, OpenID Connect, SAML, SCIM, FIDO2, WebAuthn and related identity standards.
Requirements
Nice to have: Financial Services
Nice to have: Banking
Nice to have: Payments
Nice to have: Highly Regulated Industry Experience
Engineering identity and access management solutions that
radically simplify how customers safely interact with us online.
As Engineer in the Identity, Verification and Authentication
Tribe you’ll be working as part of a high performing cross-functional team. You
will also be focused on helping teams build a best-in-class engineering
practice.
About You
To grow and be successful in this role, you will ideally bring
the following:
Essential skills
Modern CIAM technologies, such
as: Forgerock(preferred), Ping, Okta, AuthO or progressive development of
platforms from Oracle, CA etc
Languages such as: Java, Go or
Python (Solid software engineering fundamentals and hands-on development
capability)
Relevant Experiences
A passion for radically
simplifying customer focused identity and access management
Knowledge and practical
experience designing and developing modern CIAM technologies, such as:
Forgerock, Ping and AuthO or progressive development of platforms from
Oracle, CA etc
Experience in modern
development practices and languages such as: Java, Go, Python or
JavaScript
Extensive experience with SAML,
SCIM, OAuth, OpenID and forms-based authentication, as well as general
networking technologies including HTTP/S, SSL/TLS, TCP/IP, Firewall, Proxy
etc.,
Experience with CIAM and
API-based design/deployment highly desirable
A thirst and willingness to
expand knowledge with new technologies (e.g. self-learning, community
involvement, or contributing to open source) bringing benefits into the
tribe
You practice and preach about
Continuous Integration, Development, Deployment and Testing practices and
dabble in DevOps tools and standards;
Experience with continuous
integration/delivery. Tooling such as Git/GitHub, GitHub actions, Gradle,
etc.,
Contribute to the design and
architecture of the multiple concurrent projects, developing scalable and
supportable applications.
Design, implement, POC, triage
and diagnose defects/issues across the full stack
Cyber Security Engineer, Asssistant Vice PresidentNewState Street · Bangalore, India
SECURITY SPECIALISTCreative Information Technology, Inc. · Towson, US+1 more
Principal CIAM ArchitectCitizens Bank · Johnston, US+5 more
ForgeRock DeveloperXPT Software Australia Pty Ltd · Melbourne, Australia