Lead CIAM Architect for Next-Gen Identity Platform

Singtel Group; City of Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Employee discounts

Flexible work

Campus facilities

Additional leave

Parental leave

Professional development

Diversity networks

Wellbeing support

Commuter bus

Job summary

Optus is seeking a Solution Architect to lead the design and delivery of a next-generation Customer Identity and Access Management platform. You will shape how customers experience security across channels and act as the technical authority shaping feature evolution and privacy-by-design commitments.

You will collaborate across Digital, Marketing, Fraud, and IT to ensure CIAM integrates with the broader Optus platform while advancing identity capabilities such as decentralised identity and

Qualifications

• Significant experience in information security with a strong focus on customer identity, CIAM, or consumer authentication platforms at enterprise scale
• Demonstrated ability to design and architect CIAM platforms or consumer authentication systems in complex, high-scale environments
• Hands-on experience with enterprise CIAM platforms such as Ping Identity, Auth0, ForgeRock, Okta CIAM, or Azure AD B2C
• Strong working knowledge of OAuth 2.0, OIDC, API security, and mobile application authentication
• Understanding of fraud prevention architecture relevant to telecommunications including SIM swap detection, account takeover prevention, credential stuffing, and bot management
• Experience leading platform transitions and delivery programs, bringing architecture thinking through to implementation outcomes
• A relevant tertiary qualification or equivalent practical experience in Computer Science, Information Security, or a related field

Responsibilities

• Leading the solution architecture and transition delivery for Optus's next-generation CIAM platform, ensuring the selected platform is implemented to a standard that supports millions of customers across every channel at telecommunications scale
• Designing the end-to-end customer identity architecture covering registration, authentication, consent management, and identity lifecycle across mobile, broadband, and enterprise services
• Setting the enterprise standard for customer authentication including biometric, passkeys, WebAuthn and FIDO2, MFA, and social login, balancing security rigour with seamless customer experience
• Architecting SIM swap fraud prevention, account takeover defences, and credential stuffing protections specific to the telecommunications threat landscape
• Designing privacy-by-design frameworks that meet Privacy Act and Consumer Data Right obligations without compromising the customer experience
• Evaluating emerging identity capabilities including decentralised identity, continuous authentication, and AI-driven fraud detection, and translating research into actionable architecture decisions
• Collaborating across Digital, Marketing, Fraud, and IT to influence outcomes and ensure CIAM architecture integrates seamlessly with the broader Optus customer platform

Skills

CIAM architecture

Enterprise security

OAuth 2.0 / OIDC

Identity platforms

Security at scale

Education

Relevant tertiary qualification in CS/InfoSec

Tools

Ping Identity

Auth0

ForgeRock

Okta CIAM

Azure AD B2C

Job description

Optus is seeking a Solution Architect to lead the design and delivery of a next-generation Customer Identity and Access Management platform. You will shape how customers experience security across channels and act as the technical authority shaping feature evolution and privacy-by-design commitments.

You will collaborate across Digital, Marketing, Fraud, and IT to ensure CIAM integrates with the broader Optus platform while advancing identity capabilities such as decentralised identity and