Customer Identity Solutions Architect

Capco; Toronto; On-site; CAD 214,000 - 241,000; Full time

Benefits offered by this job

Health insurance

RRSP matching

Virtual Health Care

EFAP

Job summary

Capco is seeking a Customer Identity Solutions Architect to lead large-scale CIAM initiatives. You will assess current-state capabilities, define target-state architecture for MVP and future-state solutions, and guide secure, scalable customer identity experiences across enterprise environments.

The role involves working with business, security, and technology stakeholders to ensure alignment with objectives, security, and regulatory expectations.

Qualifications

• 10+ years' experience delivering CIAM architecture or digital identity transformation programs.
• Deep expertise in enterprise CIAM using Ping Identity, Okta or ForgeRock.
• Strong knowledge of OAuth 2.0, OpenID Connect, SAML, FIDO2 and passwordless auth.
• Experience designing secure customer journeys across registration, auth, consent, fraud prevention.
• Excellent stakeholder mgmt and translating complex tech into business outcomes.

Responsibilities

• Lead CIAM capability assessments and develop strategic modernization recommendations.
• Define target-state architecture and roadmaps for MVP and future-state CIAM platforms.
• Design secure CIAM solutions including onboarding, authentication, MFA, identity proofing, and fraud prevention.
• Partner with stakeholders to align CIAM with business goals, security, and regulatory requirements.
• Provide architecture leadership across identity technologies and related analytics.

Skills

CIAM

Ping Identity

Okta

ForgeRock

OAuth 2.0

OIDC

SAML

FIDO2

passwordless

MFA

Tools

Ping Identity

Okta

ForgeRock

Identity graph

Device intelligence

Fraud detection platforms

Job description

Shape the future of secure customer identity and digital trust for leading financial services organizations.

The Role

We are seeking a Customer Identity Solutions Architect with deep Customer Identity and Access Management (CIAM) expertise to lead the design and delivery of large-scale digital identity transformation initiatives. You will play a critical role in assessing current-state customer identity capabilities, defining target-state architecture for MVP and future-state solutions, and helping clients build secure, scalable, and frictionless customer identity experiences across enterprise environments.

Working closely with business, security, and technology stakeholders, you will provide strategic architecture leadership while guiding the successful delivery of modern customer identity solutions within complex transformation programmes across financial services.

This role can be full-time or independent contractor and requires 4 days per week onsite in downtown Toronto.

What You'll Do

• Lead customer identity capability assessments and develop strategic recommendations to modernize enterprise CIAM ecosystems.
• Define target-state architecture, solution blueprints, and capability roadmaps for MVP and future-state customer identity platforms.
• Design and advise on secure customer identity solutions including registration and onboarding, authentication, MFA, step-up authentication, identity proofing, account recovery, consent management, and fraud prevention.
• Partner with client stakeholders, security teams, and delivery squads to ensure customer identity solutions align with business objectives, security requirements, and regulatory expectations.
• Provide architecture leadership across modern identity technologies including Ping Identity, Okta, ForgeRock, identity graph, identity fabric, behavioural analytics, device intelligence, and fraud detection platforms.

What We're Looking For

• 10+ years' experience delivering Customer Identity and Access Management (CIAM) architecture or digital identity transformation programmes within complex enterprise environments.
• Deep expertise designing enterprise customer identity solutions using platforms such as Ping Identity, Okta, or ForgeRock.
• Strong understanding of modern identity standards including OAuth 2.0, OpenID Connect (OIDC), SAML, FIDO2, and passwordless authentication approaches.
• Experience designing secure customer journeys across registration, authentication, identity verification, consent management, fraud prevention, and customer lifecycle management.
• Excellent stakeholder management and communication skills with the ability to translate complex technical architecture into clear business outcomes.

Bonus Points For

• Experience delivering customer identity transformation within financial services or other highly regulated industries.
• Knowledge of Zero Trust security principles and modern digital identity architectures.
• Experience with cloud-native identity platforms and SaaS CIAM solutions.
• Exposure to fraud prevention, digital trust, customer identity analytics, or customer data platforms.
• Previous consulting or client-facing architecture experience leading enterprise transformation programmes.

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions
• Work in a collaborative, flat, and entrepreneurial consulting culture
• Access continuous learning, training, and industry certifications
• Be part of a team shaping the future of digital financial services
• Help shape the future of digital transformation across FS & Energy
• Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
• Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
• Virtual Health Care – Company-paid program available to all employees and their dependents/partners
• Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
• Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
• Wellness Support – Fitness reimbursement benefit to promote health and well-being
• Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.

$153,000 - $172,000 USD

Apply for this job

*

indicates a required field

First Name *

Last Name *

Email *

Phone

Country *

Phone *

Location (City) *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Do you have a preferred pronoun?

If you answered yes to the previous question, please provide your preferred pronoun.

LinkedIn Profile

Are you authorized to work in the country in which you’re applying? * Select...

How did you hear about this role? * Select...

Do you know anyone or are you related to anyone who works at Capco? *

Request for Accommodation * Select...

Do you have a request for accommodation?

If you answered yes to the previous question, please provide additional details.

Capco Job Candidate Privacy Notice Acknowledgement * Select...

Capco Job Candidate Privacy Notice Acknowledgement

Are you okay to do 4 days a week in the office? * Select...