Solutions Architect, CIAM

Singtel Group; City of Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Employee discounts

Flexible work

Campus facilities

Additional leave

Parental leave

Professional development

Diversity networks

Wellbeing support

Commuter bus

Job summary

Optus is seeking a Solution Architect to lead the design and delivery of a next-generation Customer Identity and Access Management platform. You will shape how customers experience security across channels and act as the technical authority shaping feature evolution and privacy-by-design commitments.

You will collaborate across Digital, Marketing, Fraud, and IT to ensure CIAM integrates with the broader Optus platform while advancing identity capabilities such as decentralised identity and

Qualifications

• Significant experience in information security with a strong focus on customer identity, CIAM, or consumer authentication platforms at enterprise scale
• Demonstrated ability to design and architect CIAM platforms or consumer authentication systems in complex, high-scale environments
• Hands-on experience with enterprise CIAM platforms such as Ping Identity, Auth0, ForgeRock, Okta CIAM, or Azure AD B2C
• Strong working knowledge of OAuth 2.0, OIDC, API security, and mobile application authentication
• Understanding of fraud prevention architecture relevant to telecommunications including SIM swap detection, account takeover prevention, credential stuffing, and bot management
• Experience leading platform transitions and delivery programs, bringing architecture thinking through to implementation outcomes
• A relevant tertiary qualification or equivalent practical experience in Computer Science, Information Security, or a related field

Responsibilities

• Leading the solution architecture and transition delivery for Optus's next-generation CIAM platform, ensuring the selected platform is implemented to a standard that supports millions of customers across every channel at telecommunications scale
• Designing the end-to-end customer identity architecture covering registration, authentication, consent management, and identity lifecycle across mobile, broadband, and enterprise services
• Setting the enterprise standard for customer authentication including biometric, passkeys, WebAuthn and FIDO2, MFA, and social login, balancing security rigour with seamless customer experience
• Architecting SIM swap fraud prevention, account takeover defences, and credential stuffing protections specific to the telecommunications threat landscape
• Designing privacy-by-design frameworks that meet Privacy Act and Consumer Data Right obligations without compromising the customer experience
• Evaluating emerging identity capabilities including decentralised identity, continuous authentication, and AI-driven fraud detection, and translating research into actionable architecture decisions
• Collaborating across Digital, Marketing, Fraud, and IT to influence outcomes and ensure CIAM architecture integrates seamlessly with the broader Optus customer platform

Skills

CIAM architecture

Enterprise security

OAuth 2.0 / OIDC

Identity platforms

Security at scale

Education

Relevant tertiary qualification in CS/InfoSec

Tools

Ping Identity

Auth0

ForgeRock

Okta CIAM

Azure AD B2C

Job description

Select how often (in days) to receive an alert:

*We are open to cnadidates based in Sydney & Melbourne.

At Optus, millions of Australians trust us with their digital lives every day. How they register, authenticate, and manage their identity across every channel we operate is one of the most consequential engineering decisions we make. We are now looking for a Solution Architect to lead the design and delivery of our next-generation Customer Identity and Access Management platform, and to shape how customers experience security for years to come.

This is a rare opportunity to own the architecture of a next-generation customer identity platform from day one. The platform decision has been made and the program is underway. You will step in as the solution architect, lead the transition from the current state, and then stay close to the platform as the technical authority shaping feature evolution, customer experience improvements, and emerging identity capabilities. If you want to make a lasting architectural mark on a platform used by millions of Australians, this is it.

Your day to day will consist of

• Leading the solution architecture and transition delivery for Optus's next-generation CIAM platform, ensuring the selected platform is implemented to a standard that supports millions of customers across every channel at telecommunications scale.
• Designing the end-to-end customer identity architecture covering registration, authentication, consent management, and identity lifecycle across mobile, broadband, and enterprise services.
• Setting the enterprise standard for customer authentication including biometric, passkeys, WebAuthn and FIDO2, MFA, and social login, balancing security rigour with seamless customer experience.
• Architecting SIM swap fraud prevention, account takeover defences, and credential stuffing protections specific to the telecommunications threat landscape.
• Designing privacy-by-design frameworks that meet Privacy Act and Consumer Data Right obligations without compromising the customer experience.
• Evaluating emerging identity capabilities including decentralised identity, continuous authentication, and AI-driven fraud detection, and translating research into actionable architecture decisions.
• Collaborating across Digital, Marketing, Fraud, and IT to influence outcomes and ensure CIAM architecture integrates seamlessly with the broader Optus customer platform

What makes you perfect for the role?

• Significant experience in information security with a strong focus on customer identity, CIAM, or consumer authentication platforms at enterprise scale
• Demonstrated ability to design and architect CIAM platforms or consumer authentication systems in complex, high-scale environments
• Hands-on experience with enterprise CIAM platforms such as Ping Identity, Auth0, ForgeRock, Okta CIAM, or Azure AD B2C
• Strong working knowledge of OAuth 2.0, OIDC, API security, and mobile application authentication
• Understanding of fraud prevention architecture relevant to telecommunications including SIM swap detection, account takeover prevention, credential stuffing, and bot management
• Experience leading platform transitions and delivery programs, bringing architecture thinking through to implementation outcomes
• A relevant tertiary qualification or equivalent practical experience in Computer Science, Information Security, or a related field.

The good stuff….

• Competitive remuneration and employee discounts. Make life easier (and more affordable) with $80 monthly credit and 25% off Optus products and unique shopping discounts with our retail partners.
• Flexible working arrangements with opportunities to work three days in the office, two days remote or home.
• Vibrant and collaborative office campus that includes cafes, convenience store, chill out zones, GP, post office, gym and on-site childcare centre.
• Competitive leave policies, including additional 'Connected’ days to focus on culture, family, health, community, or whatever’s important to you.
• We support growing families with inclusive, carer-neutral paid Parental Leave of up to 16 weeks.
• Direct your own development and build future-ready skills with Optus U’s industry-focused micro-credentials, developed with La Trobe and Macquarie Universities.
• Build meaningful connections through employee-led networks and diversity initiatives including Culture Connect, Elevate Women, Disability Network and Express Yourself (LGBTQIA+).
• Put your wellbeing first with free access to counselling and support services, 24/7 — in-person, by phone, SMS, or video.
• Free Optus bus from Macquarie University Metro Station (every 6-8 minutes); morning and afternoon.

At Optus, we are strengthened by others and that means valuing diversity and saying ‘yes’ to embracing individual differences. We are committed to ensuring that our application process provides an equal employment opportunity to all job seekers, including individuals from diverse gender, cultural and linguistic backgrounds, individuals with a disability, individuals identifying as being part of the LGBTQIA+ community, individuals who may have served in the armed forces or who identify as Aboriginal and/or Torres Strait Islander. We also want to do our best to make our recruitment process inclusive. If you require any adjustments or accessibility support to participate fairly and equitably in the recruitment process, please email [e-mail] or call 1800 309 170.