IAM Architect
Toronto, ON - Hybrid
Skills Required:
Responsible for the architecture and design of new features capabilities (ForgeRock Ping) Review the business requirements (the what) provided by the IAM Product team and provide the overall architectural design (the how) to the IAM Engineering team to build into the IAM service.
Provide required design artifacts to key stakeholders which clearly outlines the solution, components involved, key decisions, and time and cost estimates Closely collaborate with IAM Engineering partners in all aspects of the design and ensure alignment and synergy regarding proposed solution.
Evaluate new authentication capabilities introduced into the ever-changing IAM landscape and account for what is applicable into proposed designs (short-term and long-term)
Partner with various cross functional architect teams (IAM, security, business channel, fraud) to solidify design approach which aligns with best practices and strategic direction of the platform
Collaborate with stakeholders across the Bank - technology, security architecture, security advisory, fraud, compliance and business channel teams to provide enterprise grade solutions which meet the business and security requirements
Represent the CIAM Architecture team on various governance boards but providing both expertise and the required artifacts necessary to ensure stakeholder approval Design based on strong CIAM expertise that aligns with industry standards (FIDO, OIDC, OAUTH), best practices (MFA, NIST 800-63B) and a forward-looking mentality (Passkeys, VCs, DIDs).
Skills:
10 years in IAM space with 3 years in an Architect Role. 5 years of experience working within CIAM space (ForgeRock, Okta, Ping Identity etc.) 3 years of hands-on experience with ForgeRock platform (SaaS or On-Prem).
Strong understanding of product capabilities Strong understanding of various MFA technologies along with pro and con of each Experience developing and documenting CIAM directives, standards and policies.
Experience with designing and implementing authentication and credential management flows based on channel requirements. Experience in scoping, sizing and prioritizing solutions for a project.