CIAM Architect

CIAM Architect Our client, an IT Services and Consultant company, is looking for a CIAM Architect for their Plano, TX/New Jersey, NJ/Boston, MA/Charlotte, NC/Hybrid location. Responsibilities: Lead the implementation of secure single sign-on (SSO), federation, and identity lifecycle management workflows across cloud and hybrid environments. Deep knowledge of standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, JWT, and modern web security (TLS, cookies, CORS). Strong understanding of directory services & identity stores: LDAP, Active Directory/Azure AD, and cloud directories. Integration skills with RESTful APIs and event-driven patterns; proficiency with JSON and secure token handling. Fraud detection & risk-based authentication: integrating risk scoring engines into CIAM flows. Design, develop, and maintain high-performance, scalable microservices using Java 17/21 and the Spring Boot ecosystem. Design and implement fine-grained access controls, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC). Integrate applications with enterprise IAM/IdP solutions (e.g., ForgeRock, Ping, Okta, Auth0, or AWS Cognito). Conduct threat modeling, code reviews, and vulnerability remediation to meet strict compliance standards. Requirements: Experience with Transmit Security for identity orchestration, passwordless authentication, or advanced cross-channel journey management. Experience with LexisNexis ThreatMetrix (or similar digital identity intelligence tools) for device fingerprinting, fraud detection, and risk-based step-up authentication. Years of Experience: 10.00 Years of Experience Why Should You Apply? Health Benefits Referral Program Excellent growth and advancement opportunities ICONMA