Customer Identity & Access Management (CIAM) Engineer

We are looking for a skilled CIAM Engineer with expertise in Transmit Security and Apigee to build secure, scalable, and seamless customer authentication solutions. The role focuses on password less authentication, fraud prevention, API security, and identity lifecycle management across web and mobile platforms. Customer Identity & Authentication Design and implement Transmit Security CIAM solutions Enable password less authentication, adaptive MFA, and risk-based authentication (RBA) Implement FIDO2/WebAuthn, passkeys, biometrics, OTP, and push authentication Build authentication and registration journeys using Transmit Journey Orchestration Configure OIDC, OAuth 2.0, and SAML flows Manage identity lifecycle registration, login, step-up auth, recovery, consent, profile updates Use MongoDB for storing profiles, session data, device fingerprints, and fraud telemetry Apply device, behavioral, and network signals for authentication decisions Implement real‑time risk scoring to prevent ATO, credential stuffing, and bot attacks Align fraud rules with Transmit policies and Apigee enforcement Deploy solutions on AWS/GCP Build CI/CD pipelines using Infrastructure‑as‑Code Manage secrets, tokens, and certificates securely Ensure high availability, scalability, and performance Security & Compliance Apply Zero Trust principles across identity and API layers Ensure compliance with PCI-DSS, SOC 2, GDPR Support audits with logs, access records, and fraud reports Perform threat modeling and security reviews Develop Apigee API proxies for identity and fraud services Configure policies for rate limiting, threat protection, and payload transformation Enable API security, analytics, and monitoring Support integrations across channels, CIAM, and backend systems Troubleshooting & Optimization Resolve issues in authentication, tokens, and API proxies Optimize performance and user experience Promote adoption of passwordless and low‑friction authentication Required Skills Experience with Transmit Security and Apigee Knowledge of OAuth 2.0, OIDC, SAML, FIDO2/WebAuthn Hands‑on with AWS/GCP, MongoDB, API security, CI/CD Strong understanding of Zero Trust and identity security Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include Paid time off based on employee grade (A‑F), defined by policy Vacation 12‑25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave Medical, dental, and vision coverage (or provincial healthcare coordination in Canada) Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada) Life and disability insurance Employee assistance programs Other benefits as provided by local policy and eligibility Important Notice Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini’s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation. Disclaimers Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law. This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact. Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process. Click the following link for more information on your rights as an Applicant in the United States. #J-18808-Ljbffr Capgemini