CIAM (Customer Identity and Access Management) Specialist

About the role

We are seeking a CIAM (Customer Identity and Access Management) Specialist to lead the strategy, implementation and governance of CIAM solutions. Reporting to the Head of IAM, you will be the primary authority on CIAM design and architecture, ensuring secure and seamless customer authentication and identity management across all channels.

Key responsibilities

• Contribute to the CIAM roadmap covering onboarding journeys, authentication methods, progressive profiling, consent and account recovery.
• Align CIAM capabilities with business objectives while enforcing security and compliance.
• Define KPIs such as login success rate, fraud rate, MFA adoption and recovery success.
• Design and manage the full lifecycle of customer identities, including registration, verification, profile management, account linking, deactivation and retention.
• Implement authentication experiences: password‑less, MFA, step‑up, adaptive/risk‑based, social login and enterprise federation.
• Configure authorization patterns, customer roles, entitlements and API access policies for mobile, web and partner portals.
• Integrate applications and APIs using OIDC, OAuth2, SAML and SCIM, and support secure token handling.
• Partner with engineering teams to embed CIAM via SDKs, login widgets, token validation and session management.
• Implement consent capture, privacy controls and auditable traceability for key events.
• Deploy threat protections such as throttling, bot detection, CAPTCHA, anomaly detection and account‑takeover safeguards.
• Monitor service health, build runbooks, define SLAs/SLOs and manage incident response.

Required profile

• Proven experience leading CIAM strategy, implementation and governance.
• Strong understanding of security, compliance and privacy requirements for customer identity.
• Ability to define metrics and drive continuous improvement of authentication flows.
• Excellent collaboration skills with engineering, product and security teams.

Required skills

• OIDC / OAuth2, SAML, SCIM protocols.
• Multi‑factor authentication, password‑less and adaptive authentication techniques.
• Social login integration (Apple, Google) and enterprise federation.
• API access policy design, token management and session handling.
• Consent management, privacy compliance and audit logging.
• Threat mitigation: throttling, bot detection, CAPTCHA, anomaly detection, account‑takeover protection.
• SDK integration, login widget implementation, runbook creation, SLA/SLO definition and incident management.