Sr CIAM Security Professional

Citizens Bank; Johnston (RI); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Flexible work arrangements

Retirement benefits

Job summary

Citizens Bank is seeking a Senior CIAM Security Professional to advance the bank's identity strategy and support a scalable identity platform. You will engineer, support, and operate authentication, federation, directory services, privileged access, and cloud identity capabilities for secure customer and workforce experiences.

You will collaborate with Digital Identity, Security Engineering, Product Management, Architecture, and Technology teams to modernize the identity ecosystem, enable

Qualifications

• Experience supporting enterprise IAM and CIAM platforms.
• Experience with SAML, OAuth, OpenID Connect, SCIM, and Federation Services.
• Experience with MFA, Passwordless, Risk Based Authentication, or Adaptive Authentication.
• Experience with Entra ID, AWS Identity Services, AD, LDAP, or related identity infra.
• Experience with Privileged Access Management and Identity Lifecycle Management.
• Knowledge of Zero Trust security principles and modern identity security architectures.
• Experience supporting large-scale authentication in regulated environments.

Responsibilities

• Provide Level 3 engineering and operational support for IAM/CIAM platforms.
• Support SSO, MFA, Passwordless, Federation, and Adaptive Authentication.
• Collaborate with product, engineering, architecture, and security teams on identity solutions.
• Support cloud and hybrid identity platforms (Azure AD, AWS Directory Services, AD, LDAP).
• Implement and support Privileged Access Management and Just In Time access provisioning.
• Onboard apps to centralized authentication platforms and troubleshoot issues.
• Monitor platform health, capacity, and reliability; identify automation opportunities.

Skills

IAM platforms

CIAM

SAML

OAuth

OpenID Connect

MFA

Zero Trust

Identity Federation

Azure AD

LDAP

Tools

Microsoft Entra ID

AWS Identity Services

Active Directory

LDAP directory services

Job description

Description

Senior CIAM Security Professional

Location and work arrangement:
Four day onsite hybrid schedule in one of the following Citizens hubs:

• Johnston, RI
• Phoenix, AZ
• Westwood or Medford, MA
• Iselin, NJ
• Pittsburgh, PA
Franklin, TN
• Cleveland, OH
• Chicago, IL
• Plano, TX

The Senior CIAM Security Professional will play a critical role in advancing Citizens' Customer Identity & Authentication (CIAM) strategy and supporting the evolution of a modern, scalable, and secure identity platform. This role is responsible for engineering, support, and operational excellence across authentication, identity federation, directory services, privileged access, and cloud identity capabilities that enable secure, frictionless customer and workforce experiences.

Working closely with Digital Identity, Security Engineering, Product Management, Architecture, and Technology teams, this individual will help modernize Citizens' identity ecosystem by supporting next generation authentication solutions, strengthening security controls, improving platform reliability, and enabling enterprise scale identity services.

Primary Responsibilities

• Provide Level 3 engineering and operational support for Citizens' Identity and Access Management and Customer Identity & Authentication platforms.
• Support the delivery and ongoing operation of modern authentication capabilities including Single Sign On (SSO), Multifactor Authentication (MFA), Passwordless Authentication, Identity Federation, and Adaptive Authentication.
• Partner with product, engineering, architecture, and security teams to implement identity solutions that improve security, customer experience, and operational efficiency.
• Support cloud and hybrid identity platforms including Microsoft Entra ID (Azure AD), AWS Directory Services, Active Directory, and LDAP services.
• Implement and support Privileged Access Management, Password Vaulting, Just In Time access provisioning, and Zero Trust access controls.
• Assist with onboarding applications and services to centralized authentication and identity platforms.
• Troubleshoot complex authentication, authorization, federation, and directory integration issues across customer and workforce identity ecosystems.
• Perform software deployments, code promotion activities, platform upgrades, remediation efforts, and vulnerability management activities.
• Monitor platform health, reliability, performance, and capacity to ensure highly available identity services.
• Identify opportunities for automation and process improvement to reduce operational overhead and improve service delivery.
• Contribute to identity modernization initiatives supporting Citizens' long term CIAM and IAM strategy.

Desired Experience

• Experience supporting enterprise Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) platforms.
• Experience with modern authentication protocols and standards including SAML, OAuth, OpenID Connect, SCIM, and Federation Services.
• Experience supporting MFA, Passwordless Authentication, Risk Based Authentication, or Adaptive Authentication technologies.
• Experience with Microsoft Entra ID, AWS Identity Services, Active Directory, LDAP, or related identity infrastructure.
• Experience supporting Privileged Access Management and Identity Lifecycle Management solutions.
• Knowledge of Zero Trust security principles and modern identity security architectures.
• Experience supporting large scale authentication and identity platforms in a highly regulated environment.

Pay Transparency

• The salary range for this position is $100,000 - $150,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.
• We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens’ paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.