CIAM Engineer: Secure Identity & SSO Architect

Realign Llc; Toronto; Hybrid; CAD 100,000 - 150,000; Full time

Job summary

Realign Llc is seeking a CIAM Engineer to design, implement, and operate customer identity and access management solutions. You will develop secure authentication and authorization flows for consumer-facing apps, and enable SSO and MFA.

The role requires strong knowledge of identity standards, cloud platforms, and privacy controls, collaborating with developers, security teams, and product owners to deliver scalable CIAM platforms.

Qualifications

• Strong knowledge of identity standards and protocols including OIDC, SAML, JWT, and PKCE.
• Experience with API security and token-based authentication.
• Familiarity with web and mobile application integration.
• Experience with REST APIs and JSON.
• Working knowledge of cloud platforms (Azure, AWS, GCP) and CIAM automation.
• Strong understanding of CIAM security risks and controls.
• Experience implementing privacy, consent, and data protection requirements.
• Familiar with OWASP Top 10 and identity threats.

Responsibilities

• Design, implement, and operate CIAM solutions for customer and partner identities.
• Develop secure authentication and authorization flows for consumer-facing applications.
• Implement and support Single Sign-On (SSO) and MFA.
• Integrate CIAM platforms with web, mobile, and API-based applications.
• Design consent management, profile management, and privacy controls.
• Implement identity federation using modern protocols and standards.
• Support customer identity lifecycle management (registration, updates, deactivation).
• Ensure scalability, performance, and high availability of CIAM platforms.
• Enforce security, privacy, and compliance standards (GDPR, CCPA).
• Troubleshoot authentication issues and integration defects; collaborate with devs, security teams, and product owners.
• Support audits, threat modeling, and incident response related to customer identity.
• Create technical documentation, architecture diagrams, and runbooks.

Skills

Identity standards

OIDC

SAML 2.0

JWT

PKCE

API security

Token-based authentication

Web/mobile integration

REST APIs

Cloud platforms

CIAM automation

Security compliance

OWASP Top 10

Tools

Azure

AWS

GCP

Job description

Realign Llc is seeking a CIAM Engineer to design, implement, and operate customer identity and access management solutions. You will develop secure authentication and authorization flows for consumer-facing apps, and enable SSO and MFA.

The role requires strong knowledge of identity standards, cloud platforms, and privacy controls, collaborating with developers, security teams, and product owners to deliver scalable CIAM platforms.