Job Role : CIAM Engineer
Location : Toronto ON (Hybrid)
Job Type : Full time Permanent
Required Skills:
• Strong knowledge of identity standards and protocols AUTH 2.0, OpenID Connect (OIDC)SAML 2.0JWT, PKCE
• Experience with API security and tokenbased authentication
• Familiarity with web and mobile application integration
• Experience with REST APIs and JSON
• Working knowledge of cloud platforms (Azure, AWS, GCP)CIAM automation and configuration using scripts or SDKsSecurity Compliance
• Strong understanding of CIAM security risks and controls
• Experience implementing privacy, consent, and data protection requirements
• Familiar with OWASP Top 10, identity related threats, and mitigation techniques
Roles and responsibilities:
• Design, implement, and operate CIAM solutions for customer and partner identities
• Develop secure authentication and authorization flows for consumer facing applications
• Implement and support Single SignOn (SSO)
• Multi Factor Authentication (MFA)Social and password less login Integrate CIAM platforms with web, mobile, and API based applications
• Design consent management, profile management, and privacy controls
• Implement identity federation using modern protocols and standards
• Support customer identity lifecycle management (registration, updates, deactivation)
• Ensure scalability, performance, and high availability of CIAM platforms
• Enforce security, privacy, and compliance standards (GDPR, CCPA, consent, data residency)
• Troubleshoot authentication issues, performance bottlenecks, and integration defects Collaborate with application developers, security teams, and product owners
• Support audits, threat modeling, and incident response related to customer identity
• Create technical documentation, architecture diagrams, and operational runbooks