CIAM Full Stack Engineer

Customer Identity & Access Management EngineerThis role helps build and support secure, seamless Customer Identity & Access Management (CIAM) experiences across Manulife's digital channels. You will develop customer-facing applications and services using React and Node.js, contributing to capabilities such as registration, authentication, multi-factor authentication (MFA), consent, profile management, and account recovery.Working within the CIAM team, you will turn customer and business needs into reliable software. You will apply modern identity standards and secure engineering practices while helping improve customer journeys and the operation of identity services.Position ResponsibilitiesDevelop, test, and maintain full-stack CIAM capabilities using React, Node.js, and related technologies.Build accessible, responsive customer experiences for registration, sign-in, MFA, consent, profile management, and account recovery.Develop and maintain APIs and backend services that support identity journeys and application integrations.Integrate digital applications with CIAM platforms using standards-based protocols such as OIDC/OAuth2, SAML, SCIM, and JWT.Implement authentication, authorization, token handling, session management, and logout flows following established security practices.Collaborate with product owners, designers, architects, and security teams to refine requirements and deliver maintainable solutions.Contribute to technical designs, API contracts, development standards, and reusable components.Apply secure coding practices and address vulnerabilities through code reviews, automated testing, and dependency updates.Build and maintain unit, integration, and end-to-end tests for applications, services, and identity journeys.Contribute to CI/CD pipelines and deployment configurations that support safe, repeatable releases.Help deploy and support cloud-based solutions, preferably on Azure.Use logs, metrics, traces, and alerts to troubleshoot issues and improve reliability.Participate in production support, incident response, root-cause analysis, and continuous improvement.Work with fraud and risk teams to support risk signals and adaptive authentication.Document technical designs, integration patterns, and operational procedures.Share knowledge and contribute to strong engineering practices across the team.Required Qualifications3+ years of software engineering experience building or supporting production web applications.Hands-on experience with React and modern JavaScript or TypeScript.Experience building backend services or APIs with Node.js.Experience designing or integrating REST APIs and working with distributed systems.Understanding of identity and access management concepts, preferably including OIDC/OAuth2, SAML, and JWT.Familiarity with authentication, authorization, MFA, or other customer identity capabilities.Understanding of secure coding practices, code reviews, and automated testing.Experience with source control, build tools, testing frameworks, and CI/CD workflows.Experience deploying or supporting cloud-based applications; Azure experience is an asset.Strong troubleshooting, communication, and collaboration skills.Bachelor's degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.Preferred QualificationsExperience with enterprise CIAM platforms such as IBM Security Verify, RSA, or comparable identity providers.Familiarity with WebAuthn/FIDO2, passkeys, adaptive authentication, device intelligence, identity proofing, or bot mitigation.Exposure to Azure services such as App Services, Functions, API Management, Key Vault, Azure Monitor, or Application Insights.Familiarity with containers, infrastructure as code, or cloud-native application design.Experience building accessible, internationalized, and responsive customer experiences.Exposure to observability tools such as Azure Monitor, Application Insights, Datadog, or Splunk.Financial services, insurance, or other regulated-industry experience.Experience working in Agile teams and with delivery tools such as Azure DevOps, Jira, or GitHub.Relevant cloud, software engineering, identity, or security certifications.