CIAM Engineer-3

Realign Llc; Toronto; Hybrid; CAD 110,000 - 150,000; Full time

Job summary

Realign Llc in Toronto (Hybrid) seeks a CIAM Engineer to design, implement, and run customer and partner identity solutions. You will build secure authentication and authorization flows for web, mobile, and API apps, with SSO, MFA, and passwordless login capabilities, while enforcing privacy and data protection requirements.

The role requires strong CIAM protocol knowledge, cloud platform experience, and collaboration with security teams to ensure scalable, compliant identity systems.

Qualifications

• Experience with CIAM protocols and security controls.
• Experience integrating CIAM with web, mobile and API apps.
• Familiarity with privacy, consent, and data protection requirements.
• Knowledge of OWASP Top 10 and related mitigations.

Responsibilities

• Design, implement, and operate CIAM solutions for customer and partner identities.
• Develop secure authentication and authorization flows for consumer facing applications.
• Implement and support Single Sign-On (SSO).
• Enable MFA and passwordless login; integrate CIAM with web, mobile and API apps.
• Design consent management, profile management, and privacy controls.
• Implement identity federation using modern protocols and standards.
• Support customer identity lifecycle management (registration, updates, deactivation).
• Ensure CIAM scalability, performance, and high availability.
• Enforce security, privacy, and compliance standards (GDPR, CCPA, consent).
• Troubleshoot authentication issues; collaborate with developers and security teams.
• Create technical docs, architecture diagrams, and runbooks.

Skills

Identity standards

Auth 2.0

OIDC

SAML 2.0

JWT

PKCE

API security

Token-based authentication

Web & mobile integration

REST APIs

JSON

Cloud platforms

CIAM automation

SDKs

Security compliance

CIAM security

Privacy & data protection

OWASP Top 10

Tools

Azure

AWS

GCP

Job description

Job Description

Job Role : CIAM Engineer

Location : Toronto ON (Hybrid)

Job Type : Full time Permanent

Job Type: Full Time

Job Category: IT

Required Skills

• Strong knowledge of identity standards and protocols AUTH 2.0, OpenID Connect (OIDC)SAML 2.0JWT, PKCE
• Experience with API security and tokenbased authentication
• Familiarity with web and mobile application integration
• Experience with REST APIs and JSON
• Working knowledge of cloud platforms (Azure, AWS, GCP)CIAM automation and configuration using scripts or SDKsSecurity Compliance
• Strong understanding of CIAM security risks and controls
• Experience implementing privacy, consent, and data protection requirements
• Familiar with OWASP Top 10, identity related threats, and mitigation techniques

Roles and Responsibilities

• Design, implement, and operate CIAM solutions for customer and partner identities
• Develop secure authentication and authorization flows for consumer facing applications
• Implement and support Single SignOn (SSO)
• Multi Factor Authentication (MFA)Social and password less login Integrate CIAM platforms with web, mobile, and API based applications
• Design consent management, profile management, and privacy controls
• Implement identity federation using modern protocols and standards
• Support customer identity lifecycle management (registration, updates, deactivation)
• Ensure scalability, performance, and high availability of CIAM platforms
• Enforce security, privacy, and compliance standards (GDPR, CCPA, consent, data residency)
• Troubleshoot authentication issues, performance bottlenecks, and integration defects Collaborate with application developers, security teams, and product owners
• Support audits, threat modeling, and incident response related to customer identity
• Create technical documentation, architecture diagrams, and operational runbooks