Sr CIAM Security Professional

Citizens Bank; Johnston (RI); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical, dental and vision coverage

Retirement benefits

Flexible work arrangements

Education reimbursement

Job summary

Citizens Bank is seeking a Senior CIAM Security Professional to advance the bank’s identity strategy and support a scalable, secure identity platform.

You will engineer and operate CIAM/IAM capabilities, including SSO, MFA, Passwordless, and federation, in a hybrid on-site environment across multiple identity services.

Qualifications

• Experience supporting enterprise Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) platforms.
• Experience with modern authentication protocols including SAML, OAuth, OpenID Connect, SCIM, and Federation Services.
• Experience with MFA, Passwordless Authentication, Risk Based Authentication, or Adaptive Authentication technologies.
• Experience with Microsoft Entra ID, AWS Identity Services, Active Directory, LDAP, or related identity infrastructure.
• Experience supporting Privileged Access Management and Identity Lifecycle Management solutions.
• Knowledge of Zero Trust security principles and modern identity security architectures.
• Experience supporting large scale authentication and identity platforms in regulated environments.

Responsibilities

• Provide Level 3 engineering and operational support for IAM/CIAM platforms.
• Support delivery and ongoing operation of SSO, MFA, Passwordless, Identity Federation, and Adaptive Authentication capabilities.
• Collaborate with product, engineering, architecture and security teams to implement identity solutions improving security and user experience.
• Support cloud/hybrid identity platforms including Microsoft Entra ID, AWS Directory Services, Active Directory, and LDAP.
• Implement and support Privileged Access Management, Password Vaulting, Just In Time access provisioning, and Zero Trust controls.
• Assist onboarding of applications/services to centralized authentication/identity platforms.
• Troubleshoot complex authentication, authorization, federation and directory integration issues across identity ecosystems.
• Perform deployments, platform upgrades, remediation, and vulnerability management activities.
• Monitor platform health, reliability, and capacity to ensure highly available identity services.
• Identify opportunities for automation and process improvement to reduce operational overhead.
• Contribute to identity modernization initiatives supporting Citizens' CIAM/IAM strategy.

Skills

CIAM

IAM

SSO

MFA

Passwordless

AdaptiveAuth

Zero Trust

Directory Services

Job description

Description

Senior CIAM Security Professional

Location and work arrangement:
Four day onsite hybrid schedule in one of the following Citizens hubs:

• Johnston, RI
• Phoenix, AZ
• Westwood or Medford, MA
• Iselin, NJ
• Pittsburgh, PA
• Franklin, TN
• Cleveland, OH
• Chicago, IL
• Plano, TX
  

The Senior CIAM Security Professional will play a critical role in advancing Citizens' Customer Identity & Authentication (CIAM) strategy and supporting the evolution of a modern, scalable, and secure identity platform. This role is responsible for engineering, support, and operational excellence across authentication, identity federation, directory services, privileged access, and cloud identity capabilities that enable secure, frictionless customer and workforce experiences.

Working closely with Digital Identity, Security Engineering, Product Management, Architecture, and Technology teams, this individual will help modernize Citizens' identity ecosystem by supporting next generation authentication solutions, strengthening security controls, improving platform reliability, and enabling enterprise scale identity services.

Primary Responsibilities

• Provide Level 3 engineering and operational support for Citizens' Identity and Access Management and Customer Identity & Authentication platforms.
• Support the delivery and ongoing operation of modern authentication capabilities including Single Sign On (SSO), Multifactor Authentication (MFA), Passwordless Authentication, Identity Federation, and Adaptive Authentication.
• Partner with product, engineering, architecture, and security teams to implement identity solutions that improve security, customer experience, and operational efficiency.
• Support cloud and hybrid identity platforms including Microsoft Entra ID (Azure AD), AWS Directory Services, Active Directory, and LDAP services.
• Implement and support Privileged Access Management, Password Vaulting, Just In Time access provisioning, and Zero Trust access controls.
• Assist with onboarding applications and services to centralized authentication and identity platforms.
• Troubleshoot complex authentication, authorization, federation, and directory integration issues across customer and workforce identity ecosystems.
• Perform software deployments, code promotion activities, platform upgrades, remediation efforts, and vulnerability management activities.
• Monitor platform health, reliability, performance, and capacity to ensure highly available identity services.
• Identify opportunities for automation and process improvement to reduce operational overhead and improve service delivery.
• Contribute to identity modernization initiatives supporting Citizens' long term CIAM and IAM strategy.

Desired Experience

• Experience supporting enterprise Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) platforms.
• Experience with modern authentication protocols and standards including SAML, OAuth, OpenID Connect, SCIM, and Federation Services.
• Experience supporting MFA, Passwordless Authentication, Risk Based Authentication, or Adaptive Authentication technologies.
• Experience with Microsoft Entra ID, AWS Identity Services, Active Directory, LDAP, or related identity infrastructure.
• Experience supporting Privileged Access Management and Identity Lifecycle Management solutions.
• Knowledge of Zero Trust security principles and modern identity security architectures.
• Experience supporting large scale authentication and identity platforms in a highly regulated environment.

Pay Transparency

• The salary range for this position is $100,000 - $150,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.

• We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.