cIAM Architect

Looking for a cIAM Architect for a large medical device client to help with an enterprise wide ForgeRock implementation. This role is 100% remote, with no travel or relocation required.

This position will play a crucial role in protecting assets and work with key business partners, developers, vendors, and security engineers to help craft the future of our Consumer Identity and Access Management (CIAM) Program. This position will focus on the solution design for the Customer Identity and Access Management (CIAM) platform and guide the team on its implementation. To be a great fit for this role you should be comfortable and knowledgeable regarding the challenges of B2B, B2C, and other IAM ecosystems, an expert at managing, configuring, and developing CIAM platforms.
The ideal person must be experienced in delivering CIAM projects in cloud environments for CIAM platforms such as ForgeRock, Okta, Auth0, Azure B2C, Ping. Ideal candidate will have strong/expert level experience integrating ForgeRock Identity Cloud into a CIAM platform solution. The candidate will be responsible for maintaining the health and proper functioning of our external identity ecosystem.
The cIAM solution architect will plan, implement, and manage cIAM ForgeRock and associated products to meet user and company needs. The individual will work closely with other cross functional teams to scope and help mature the Consumer Identity and Access Management program services for our Partner and Customer Experience.
This technical leadership role is responsible for ensuring information system processes and procedures meet or exceed our contractual security compliance requirements, including but not limited to; GDPR, HIPAA, and NIST Cyber Security Framework.

Great interpersonal skills: good written & oral communication, ability & willingness to work within global team, collaborative & team-oriented, high attention to detail, self-driven

Responsibilities

• Responsible for the analysis of requirements and for the definition of detailed solution design, implementation, and delivery of CIAM solutions
• Responsible for guiding the development team during the implementation and deployment of CIAM products and solutions.
• Responsible for the timely identification and management of technical risks and issues
• Must be able to provide technical expertise to complex relevant problems.
• Willing to implement the organizational vision in a continually evolving environment.
• Design and code new CIAM integrations as well as modify existing integrations as necessary
• Build API(s) which can be consumed through omni channel interfaces like Traditional Web Apps, Single Page Application Frameworks, Mobile, B2B systems, etc.
• Manage and communicate project status to stakeholders and senior leadership
• Accountable for project/phase planning, execution, reporting, and close-out.

Qualifications

• 5-7+ years of experience developing Customer/Consumer Identity and Access management (cIAM) strategies, architecture, and implementation
• 5+ years of hands-on experience in design, development and implementation of Customer Identity and Access Management (CIAM) solutions
• 5+ years of hands-on experience with CIAM product and solution within large enterprise scale environments (with more than 10,000 users), including experience with workflows and/or scripting with Public facing APIs (to allow for automation of tasks)
• Direct prior work related to one or more IAM products: ForgeRock, Microsoft Azure AD B2C, Active Directory, Azure AD for access management, access control, and user policies.
• Strong understanding of the full lifecycle of customer identity processes
• Experience supporting Multi-Factor Authentication (MFA) protocols and systems.
• An understanding of core security concerns within a typical application (Password hashing, SSL/TLS, encryption at rest, XSS, XSRF)
• Familiarity with data privacy concepts, fraud detection and integration technologies
• Strong/expert level understanding of authentication mechanisms and protocols including OIDC/OAuth and SAML, and key related security concepts such as MFA, and how these are used with IdPs
• Experience in configuration, implementation, and development of web services, SAML, integration of REST and OAUTH API with various applications and services.
• Candidate must be organized and analytical, adept at working in a team environment and able to handle multiple priorities.
• Must exhibit strong written and oral communication skills and the ability to tailor messaging to the different levels of the organization in Business and Technical areas.
• Promotes communication at all levels and areas including the Team, Management, and Functional areas.
• Technically drives complex projects involving large diversities of technologies and products, teams, and regions.

Good-to-have:

• Functional understanding of IAM processes and systems related to Identity Governance and Administration (IGA), Identity and Access Management (IAM) and Privileged Access Management (PAM).
• Certifications such as: CISSP, CCSP, CISM, or CISA certification a plus
• Advanced knowledge of Agile principles, including the SCRUM methodology and ability to develop/manage a long-term plan.