CIAM Full Stack Engineer

Manulife; Boston (MA); Hybrid; USD 90,000 - 167,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Disability and life insurance

401(k) retirement plans

Paid time off (11 holidays, 3 personal

Vacation (150 hours) and sick time

Job summary

Manulife is seeking an experienced CIAM software engineer to build and support customer identity and access management across digital channels. You will develop user-facing features in React and backend services with Node.js, applying OIDC/OAuth2, SAML, and JWT standards to secure registrations, sign-in, MFA, and account recovery.

You will work with product, design, and security teams to translate requirements into reliable, maintainable solutions, contributing to API contracts, testing, and

Qualifications

• 3+ years of software engineering experience building or supporting production web applications.
• Hands-on experience with React and modern JavaScript or TypeScript.
• Experience building backend services or APIs with Node.js.
• Experience designing or integrating REST APIs and distributed systems.
• Knowledge of identity and access management concepts (OIDC/OAuth2, SAML, JWT).
• Familiarity with authentication, authorization, MFA, and secure coding practices.
• Experience with source control, CI/CD workflows, and testing.
• Experience deploying cloud-based applications; Azure is a plus.
• Strong troubleshooting, communication, and collaboration skills.
• Bachelor’s degree in CS/engineering or equivalent experience.

Responsibilities

• Develop, test, and maintain full-stack CIAM capabilities using React, Node.js, and related technologies.
• Build accessible, responsive customer experiences for registration, sign-in, MFA, consent, profile management, and account recovery.
• Develop and maintain APIs and backend services that support identity journeys and integrations.
• Integrate applications with CIAM platforms using OIDC/OAuth2, SAML, SCIM, and JWT.
• Implement authentication, authorization, token handling, session management, and logout flows securely.
• Collaborate with product owners, designers, architects, and security teams to refine requirements.
• Contribute to API contracts, development standards, and reusable components.
• Apply secure coding practices and address vulnerabilities via reviews and testing.
• Build and maintain unit/integration/end-to-end tests; support CI/CD pipelines.
• Support cloud deployments, preferably on Azure; use logs and metrics for reliability.
• Participate in production support, incident response, and continuous improvement.

Skills

React

JavaScript/TypeScript

Node.js

REST APIs

OIDC/OAuth2

SAML

JWT

MFA

Secure coding

CI/CD

Azure (cloud)

Troubleshooting

Collaboration

Communication

Education

Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent

Tools

Azure DevOps

Jira

GitHub

Job description

Job Summary

This role helps build and support secure, seamless Customer Identity & Access Management (CIAM) experiences across Manulife’s digital channels. You will develop customer-facing applications and services using React and Node.js, contributing to capabilities such as registration, authentication, multi-factor authentication (MFA), consent, profile management, and account recovery.

Working within the CIAM team, you will turn customer and business needs into reliable software. You will apply modern identity standards and secure engineering practices while helping improve customer journeys and the operation of identity services.

Position Responsibilities

• Develop, test, and maintain full-stack CIAM capabilities using React, Node.js, and related technologies.
• Build accessible, responsive customer experiences for registration, sign-in, MFA, consent, profile management, and account recovery.
• Develop and maintain APIs and backend services that support identity journeys and application integrations.
• Integrate digital applications with CIAM platforms using standards-based protocols such as OIDC/OAuth2, SAML, SCIM, and JWT.
• Implement authentication, authorization, token handling, session management, and logout flows following established security practices.
• Collaborate with product owners, designers, architects, and security teams to refine requirements and deliver maintainable solutions.
• Contribute to technical designs, API contracts, development standards, and reusable components.
• Apply secure coding practices and address vulnerabilities through code reviews, automated testing, and dependency updates.
• Build and maintain unit, integration, and end-to-end tests for applications, services, and identity journeys.
• Contribute to CI/CD pipelines and deployment configurations that support safe, repeatable releases.
• Help deploy and support cloud-based solutions, preferably on Azure.
• Use logs, metrics, traces, and alerts to troubleshoot issues and improve reliability.
• Participate in production support, incident response, root-cause analysis, and continuous improvement.
• Work with fraud and risk teams to support risk signals and adaptive authentication.
• Document technical designs, integration patterns, and operational procedures.
• Share knowledge and contribute to strong engineering practices across the team.

Required Qualifications

• 3+ years of software engineering experience building or supporting production web applications.
• Hands‑on experience with React and modern JavaScript or TypeScript.
• Experience building backend services or APIs with Node.js.
• Experience designing or integrating REST APIs and working with distributed systems.
• Understanding of identity and access management concepts, preferably including OIDC/OAuth2, SAML, and JWT.
• Familiarity with authentication, authorization, MFA, or other customer identity capabilities.
• Understanding of secure coding practices, code reviews, and automated testing.
• Experience with source control, build tools, testing frameworks, and CI/CD workflows.
• Experience deploying or supporting cloud‑based applications; Azure experience is an asset.
• Strong troubleshooting, communication, and collaboration skills.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.

Preferred Qualifications

• Experience with enterprise CIAM platforms such as IBM Security Verify, RSA, or comparable identity providers.
• Familiarity with WebAuthn/FIDO2, passkeys, adaptive authentication, device intelligence, identity proofing, or bot mitigation.
• Exposure to Azure services such as App Services, Functions, API Management, Key Vault, Azure Monitor, or Application Insights.
• Familiarity with containers, infrastructure as code, or cloud‑native application design.
• Experience building accessible, internationalized, and responsive customer experiences.
• Exposure to observability tools such as Azure Monitor, Application Insights, Datadog, or Splunk.
• Financial services, insurance, or other regulated‑industry experience.
• Experience working in Agile teams and with delivery tools such as Azure DevOps, Jira, or GitHub.
• Relevant cloud, software engineering, identity, or security certifications.

The role being advertised is an existing vacancy.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy‑related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [e-mail].

Referenced Salary Location

Boston, Massachusetts

Working Arrangement

Hybrid

Salary range is expected to be between

$90,160.00 USD - $167,440.00 USD

Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job‑related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact [e-mail] for the salary range for your location.

Manulife/John Hancock offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short‑and long‑term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension/401(k) savings plans and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in the U.S. includes up to 11 paid holidays, 3 personal days, 150 hours of vacation, and 40 hours of sick time (or more where required by law) each year, and we offer the full range of statutory leaves of absence.

We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.

Know Your Rights I Family & Medical Leave I Employee Polygraph Protection I Right to Work I E-Verify

Company: John Hancock Life Insurance Company (U.S.A.)