CIAM Architect

Stott and May Consulting; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Stott and May Consulting is seeking a pragmatic CIAM architect to define and lead the identity architecture vision for enterprise-scale solutions. You will shape strategy, roadmaps, and ensure alignment with GDPR and security best practices, working with business, security, product, and engineering teams.

Ideal candidates bring extensive CIAM experience, deep knowledge of OAuth 2.0, OpenID Connect, SAML, SCIM, and modern auth, hands-on with Entra, Okta, Auth0, ForgeRock, or Ping; cloud identity

Qualifications

• Extensive experience in CIAM architecture roles.

Responsibilities

• Define and deliver the CIAM architecture vision, strategy, and roadmap.
• Provide external-facing thought leadership on identity trends, emerging technologies, and industry best practices.

Skills

CIAM architecture

Stakeholder management

Security architecture

Identity security

Zero Trust

Education

TOGAF or CISSP or CISM certification

Tools

Microsoft Entra External ID

Okta

Auth0

ForgeRock

Ping Identity

Azure

AWS

GCP

Job description

Key Responsibilities

• Define and deliver the CIAM architecture vision, strategy, and roadmap.
• Provide external-facing thought leadership on identity trends, emerging technologies, and industry best practices.
• Design solutions for SSO, MFA, passwordless authentication, social login, federation, and customer lifecycle management.
• Lead architecture for OAuth 2.0, OpenID Connect, SAML, SCIM, and API security.
• Prioritise and manage the CIAM architecture and delivery backlog in line with business priorities.
• Conduct customer journey risk assessments, identifying security, privacy, and user experience risks.
• Work closely with business, security, product, and engineering teams to translate requirements into solution designs.
• Ensure compliance with GDPR and security best practices.
• Provide technical leadership and governance throughout delivery and implementation.

Required Experience

• Extensive experience in CIAM architecture roles.
• Strong knowledge of OAuth 2.0, OpenID Connect, SAML, SCIM, and modern authentication methods.
• Hands‑on experience with platforms such as Microsoft Entra External ID, Okta, Auth0, ForgeRock, or Ping Identity.
• Experience designing cloud-based identity solutions (Azure, AWS, or GCP).
• Experience assessing and improving digital customer journeys.
• Strong stakeholder management, communication, and influencing skills.
• TOGAF, CISSP, CISM, or Microsoft security certifications.
• Experience in regulated environments (Financial Services, Public Sector, Healthcare, Retail).
• Knowledge of Zero Trust, adaptive authentication, identity fraud prevention, and customer experience optimisation.
• CIAM vision, strategy, and target-state architecture.
• Prioritised architecture backlog and roadmap.
• Customer journey risk assessments and recommendations.
• Solution designs, standards, and governance documentation.
• Support for implementation, assurance, and stakeholder engagement activities.

Ideal Candidate: A pragmatic CIAM specialist with strong architecture and consulting skills, capable of shaping identity strategy, assessing customer journey risks, prioritising delivery roadmaps, and guiding organisations towards modern, secure customer identity platforms.