CIAM Capability Lead

Capco; Toronto; On-site; CAD 153,000 - 197,000; Full time

Benefits offered by this job

Comprehensive Benefits Coverage

RRSP with employer match

Virtual Health Care

EFAP (Employee & Family Assistance)

Parental Leave Top-Up

Wellness Reimbursement

Career coaching

Job summary

Capco is seeking a senior CIAM Capability Lead to define and evolve customer identity capabilities for major financial services clients. You will shape product strategy, architecture, and integration roadmaps, leading architects, security, and engineering to deliver scalable identity solutions.

The role requires 8+ years in CIAM, deep platform expertise (Ping Identity, Okta, ForgeRock), and strong consulting and stakeholder management to translate business goals into pragmatic identity solutions.

Qualifications

• 8+ years of experience delivering CIAM solutions in complex enterprise environments.
• Deep experience with Ping Identity, Okta, ForgeRock (or equivalent) including MFA and passkeys.
• Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM and modern identity integration patterns.
• Experience designing enterprise integration architectures for cloud-native environments.
• Excellent consulting, communication, and stakeholder management to influence technical strategy and translate business objectives into pragmatic identity solutions.

Responsibilities

• Own and evolve the end-to-end CIAM capability, including product direction, architecture, engineering standards, and technology roadmap.
• Design and deliver modern customer identity solutions encompassing authentication, authorization, MFA, passkeys, identity verification, customer onboarding, and identity orchestration.
• Define integration architectures that seamlessly connect CIAM platforms with applications, APIs, fraud prevention services, customer channels, and enterprise ecosystems.
• Lead engineering best practices, capability maturity, and technical governance while collaborating with architects, security teams, product owners, and client stakeholders.
• Drive continuous improvement of CIAM capabilities through technology innovation, platform optimisation, and strategic identity transformation initiatives.

Skills

CIAM capabilities

Enterprise architecture

Stakeholder management

Cloud integration

Security governance

Tools

Ping Identity

Okta

ForgeRock

Job description

Shape the future of secure digital identity for leading financial services organisations.

The Role

We are looking for a CIAM Capability Lead to define and evolve Customer Identity and Access Management (CIAM) capabilities for some of the world's leading financial services organisations. This is a senior technical leadership role responsible for shaping the product strategy, architecture, engineering capability, and integration roadmap for modern customer identity platforms.

You will lead the design and evolution of enterprise-scale CIAM capabilities, enabling secure, scalable, and frictionless digital customer experiences. Working alongside business stakeholders, architects, security teams, and engineering partners, you will drive identity transformation programmes spanning authentication, customer onboarding, identity orchestration, passkeys, multi-factor authentication, and emerging digital identity capabilities.

What You'll Do

• Own and evolve the end-to-end CIAM capability, including product direction, architecture, engineering standards, and technology roadmap.
• Design and deliver modern customer identity solutions encompassing authentication, authorization, MFA, passkeys, identity verification, customer onboarding, and identity orchestration.
• Define integration architectures that seamlessly connect CIAM platforms with applications, APIs, fraud prevention services, customer channels, and enterprise ecosystems.
• Lead engineering best practices, capability maturity, and technical governance while collaborating with architects, security teams, product owners, and client stakeholders.
• Drive continuous improvement of CIAM capabilities through technology innovation, platform optimisation, and strategic identity transformation initiatives.

What We're Looking For

• 8+ years of experience delivering Customer Identity and Access Management solutions within complex enterprise environments, with proven experience leading CIAM capabilities or architecture.
• Deep expertise across leading CIAM platforms such as Ping Identity, Okta, ForgeRock, or equivalent, including authentication, authorization, customer identity lifecycle management, MFA, and passkey technologies.
• Strong understanding of identity standards and protocols including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, and modern identity integration patterns.
• Experience designing enterprise integration architectures and delivering secure, scalable customer identity solutions across cloud-native environments.
• Excellent consulting, communication, and stakeholder management skills with the ability to influence technical strategy and translate business objectives into pragmatic identity solutions.

Bonus Points For

• Experience delivering enterprise CIAM strategy within financial services or other highly regulated industries.
• Knowledge of fraud prevention, behavioural analytics, device intelligence, digital trust, identity fabrics, and customer identity orchestration platforms.
• Experience leading cloud-based identity transformation initiatives across AWS, Azure, or Google Cloud Platform.
• Exposure to product ownership, capability development, or enterprise architecture for digital identity services.
• Consulting experience delivering large-scale transformation programmes for Tier 1 financial institutions.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions.
• Work in a collaborative, flat, and entrepreneurial consulting culture.
• Access continuous learning, training, and industry certifications.
• Be part of a team shaping the future of digital financial services.
• Help shape the future of digital transformation across Financial Services & Energy.

Benefits

• Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
• Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution.
• Virtual Health Care – Company-paid program available to all employees and their dependents/partners.
• Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners.
• Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment.
• Wellness Support – Fitness reimbursement benefit to promote health and well-being.
• Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Inclusion at Capco

We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know—we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration—a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.

Canada Pay Transparency

$153,000 — $197,000 CAD