Security Architect, CIAM

Capco; Toronto; On-site; CAD 211,000 - 237,000; Full time

Benefits offered by this job

Health insurance

RRSP with company matching

Virtual Health Care

EFAP – Employee & Family Assistance

Job summary

Capco in Toronto seeks a Security Architect with deep CIAM expertise to drive large-scale digital identity transformation for financial services clients. You will assess current-state capabilities, define target-state MVP and future-state architectures, and lead secure, scalable customer identity strategies across enterprise environments.

This role can be full time or independent contractor and requires 4 days on site in downtown Toronto.

Qualifications

• 10+ years of proven experience delivering Security Architecture or CIAM transformation programmes within complex enterprise environments.
• Strong expertise in Customer Identity and Access Management technologies including Ping Identity, Okta, and ForgeRock.
• Experience designing authentication and identity verification capabilities including multifactor authentication, step-up authentication, and ID proofing.
• Strong understanding of identity ecosystems including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring.
• Excellent communication and stakeholder management skills with the ability to translate technical concepts into business outcomes.

Responsibilities

• Deliver technical capability assessments across CIAM environments and define strategic recommendations for modern identity ecosystems.
• Define target-state architecture and capability roadmaps for MVP and future-state CIAM implementations.
• Design and advise on customer identity and access management solutions including MFA, step-up authentication, ID proofing, and fraud prevention capabilities.
• Collaborate with cross-functional delivery teams, security stakeholders, and client leadership to support successful programme delivery.
• Provide architecture guidance across technologies including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring platforms.

Skills

CIAM

Security Architecture

MFA

Identity & Access Management

Ping Identity

Okta

ForgeRock

Identity graph

Identity fabric

Fraud prevention

Tools

Identity Graph

Identity Fabric

Behavioural Analytics

Device Intelligence

Fraud Scoring Platforms

Job description

Shape the future of secure digital identity for leading financial services organizations.

The Role

We are seeking a Security Architect with deep Customer Identity and Access Management (CIAM) expertise to support the delivery of large-scale digital identity transformation initiatives. You will play a critical role in assessing current-state capabilities, defining target-state architecture for MVP and future-state solutions, and driving secure, scalable customer identity strategies across enterprise environments.

This role combines strategic architecture, hands-on delivery leadership, and stakeholder engagement within complex transformation programmes across financial services.

This role can be full time or independent contractor and requires 4 days on site in downtown Toronto

What You’ll Do

• Deliver technical capability assessments across CIAM environments and define strategic recommendations for modern identity ecosystems
• Define target-state architecture and capability roadmaps for MVP and future-state CIAM implementations
• Design and advise on customer identity and access management solutions including MFA, step-up authentication, ID proofing, and fraud prevention capabilities
• Collaborate with cross-functional delivery teams, security stakeholders, and client leadership to support successful programme delivery
• Provide architecture guidance across technologies including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring platforms

What We’re Looking For

• 10+ years of proven experience delivering Security Architecture or CIAM transformation programmes within complex enterprise environments
• Strong expertise in Customer Identity and Access Management technologies including Ping Identity, Okta, and ForgeRock
• Experience designing authentication and identity verification capabilities including multifactor authentication, step-up authentication, and ID proofing
• Strong understanding of identity ecosystems including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring
• Excellent communication and stakeholder management skills with the ability to translate technical concepts into business outcomes

Bonus Points For

• Experience working within financial services or highly regulated industries
• Knowledge of zero trust security principles and modern identity standards such as OAuth, OIDC, and SAML
• Experience supporting cloud-native identity transformation initiatives
• Exposure to fraud prevention and digital trust platforms
• Consulting or client-facing delivery experience within large transformation programmes

Why Join Capco

• Deliver high-impact technology solutions for Tier 1 financial institutions
• Work in a collaborative, flat, and entrepreneurial consulting culture
• Access continuous learning, training, and industry certifications
• Be part of a team shaping the future of digital financial services
• Help shape the future of digital transformation across FS & Energy

Benefits

• Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
• Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
• Virtual Health Care – Company-paid program available to all employees and their dependents/partners
• Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
• Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
• Wellness Support – Fitness reimbursement benefit to promote health and well-being
• Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Inclusion at Capco

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.

Canada Pay Transparency

$153,000 — $172,000 USD