Senior CIAM Engineer — Enterprise Identity & Access

Scotiabank; Toronto; Hybrid; CAD 110,000 - 170,000; Full time

Benefits offered by this job

DEI & Allyship programs

Accessibility at work

Upskilling & training opportunities

Competitive rewards & benefits

Community engagement programs

Job summary

Scotiabank in Toronto, Ontario is seeking a senior CIAM Engineer to drive hands‑on design, integration and deployment of enterprise identity and access management platforms. The role requires deep expertise in Java-based microservices, CIAM platforms like ForgeRock and Ping, and strong knowledge of OAuth2/OpenID Connect/SAML.

You will collaborate across engineering, product, security, and operations to ensure secure, scalable identity services.

Qualifications

• 7+ years hands‑on experience in microservice implementation with Java/J2EE and Spring
• 5+ years with major CIAM platforms (ForgeRock, Ping)
• 5 years automating deployment with CI/CD tools (Jenkins, Cloud deployments)
• Strong knowledge of OAuth2, OpenID Connect, SAML, LDAP
• Experience designing IAM solutions for cloud (AWS, Azure, GCP)
• Experience with identity federation, SSO, MFA, adaptive authentication
• Proven ability to document architectures and operational procedures

Responsibilities

• Drive hands-on engineering, configuration and integration of CIAM solutions
• Implement, maintain, and improve CIAM capabilities and services
• Design CIAM frameworks aligned with security and regulatory requirements
• Develop best practices for identity federation, SSO, MFA and OAuth2/OIDC
• Ensure CIAM work meets regulatory, compliance and security requirements
• Collaborate with engineering, product, security and operations teams
• Create technical documentation including architecture diagrams and guides
• Provide guidance to engineering teams and partners

Skills

Java/J2EE

Spring framework

Gradle

NodeJS

RESTful APIs

Cloud SQL

Kafka

OAuth2/OpenID Connect/SAML/LDAP

IAM concepts

DevOps practices

Tools

ForgeRock

PingFederate

PingAccess

PingDirectory

Okta

Jenkins

Terraform

Job description

Scotiabank in Toronto, Ontario is seeking a senior CIAM Engineer to drive hands‑on design, integration and deployment of enterprise identity and access management platforms. The role requires deep expertise in Java-based microservices, CIAM platforms like ForgeRock and Ping, and strong knowledge of OAuth2/OpenID Connect/SAML.

You will collaborate across engineering, product, security, and operations to ensure secure, scalable identity services.