CIAM Engineer

Realign Llc; Toronto; Hybrid; CAD 100,000 - 150,000; Full time

Job summary

Realign Llc is seeking a CIAM Engineer to design, implement, and operate customer identity and access management solutions. You will develop secure authentication and authorization flows for consumer-facing apps, and enable SSO and MFA.

The role requires strong knowledge of identity standards, cloud platforms, and privacy controls, collaborating with developers, security teams, and product owners to deliver scalable CIAM platforms.

Qualifications

• Strong knowledge of identity standards and protocols including OIDC, SAML, JWT, and PKCE.
• Experience with API security and token-based authentication.
• Familiarity with web and mobile application integration.
• Experience with REST APIs and JSON.
• Working knowledge of cloud platforms (Azure, AWS, GCP) and CIAM automation.
• Strong understanding of CIAM security risks and controls.
• Experience implementing privacy, consent, and data protection requirements.
• Familiar with OWASP Top 10 and identity threats.

Responsibilities

• Design, implement, and operate CIAM solutions for customer and partner identities.
• Develop secure authentication and authorization flows for consumer-facing applications.
• Implement and support Single Sign-On (SSO) and MFA.
• Integrate CIAM platforms with web, mobile, and API-based applications.
• Design consent management, profile management, and privacy controls.
• Implement identity federation using modern protocols and standards.
• Support customer identity lifecycle management (registration, updates, deactivation).
• Ensure scalability, performance, and high availability of CIAM platforms.
• Enforce security, privacy, and compliance standards (GDPR, CCPA).
• Troubleshoot authentication issues and integration defects; collaborate with devs, security teams, and product owners.
• Support audits, threat modeling, and incident response related to customer identity.
• Create technical documentation, architecture diagrams, and runbooks.

Skills

Identity standards

OIDC

SAML 2.0

JWT

PKCE

API security

Token-based authentication

Web/mobile integration

REST APIs

Cloud platforms

CIAM automation

Security compliance

OWASP Top 10

Tools

Azure

AWS

GCP

Job description

• Strong knowledge of identity standards and protocols AUTH 2.0, OpenID Connect (OIDC)SAML 2.0JWT, PKCE
• Experience with API security and tokenbased authentication
• Familiarity with web and mobile application integration
• Experience with REST APIs and JSON
• Working knowledge of cloud platforms (Azure, AWS, GCP)CIAM automation and configuration using scripts or SDKsSecurity Compliance
• Strong understanding of CIAM security risks and controls
• Experience implementing privacy, consent, and data protection requirements
• Familiar with OWASP Top 10, identity related threats, and mitigation techniques

Roles and responsibilities:

• Design, implement, and operate CIAM solutions for customer and partner identities
• Develop secure authentication and authorization flows for consumer facing applications
• Implement and support Single SignOn (SSO)
• Multi Factor Authentication (MFA)Social and password less login Integrate CIAM platforms with web, mobile, and API based applications
• Design consent management, profile management, and privacy controls
• Implement identity federation using modern protocols and standards
• Support customer identity lifecycle management (registration, updates, deactivation)
• Ensure scalability, performance, and high availability of CIAM platforms
• Enforce security, privacy, and compliance standards (GDPR, CCPA, consent, data residency)
• Troubleshoot authentication issues, performance bottlenecks, and integration defects Collaborate with application developers, security teams, and product owners
• Support audits, threat modeling, and incident response related to customer identity
• Create technical documentation, architecture diagrams, and operational runbooks

Required Skills

Job Type: Full Time

Job Category: IT

Job Description

Job Role : CIAM Engineer

Location : Toronto ON (Hybrid)

Job Type : Full time Permanent

Required Skills

• Strong knowledge of identity standards and protocols AUTH 2.0, OpenID Connect (OIDC)SAML 2.0JWT, PKCE
• Experience with API security and tokenbased authentication
• Familiarity with web and mobile application integration
• Experience with REST APIs and JSON
• Working knowledge of cloud platforms (Azure, AWS, GCP)CIAM automation and configuration using scripts or SDKsSecurity Compliance
• Strong understanding of CIAM security risks and controls
• Experience implementing privacy, consent, and data protection requirements
• Familiar with OWASP Top 10, identity related threats, and mitigation techniques

Required Skills

DevOps Engineer Senior Email Security Engineer