CIAM Engineer

Job Role : CIAM Engineer

Location : Toronto ON(Hybrid)

Job Type : Full time Permanent

Required Skills:

Strong knowledge of identity standards and protocols AUTH 2.0, OpenID Connect (OIDC)SAML 2.0JWT, PKCE

Experience with API security and tokenbased authentication

Familiarity with web and mobile application integration

Experience with REST APIs and JSON

Working knowledge of cloud platforms (Azure, AWS, GCP)CIAM automation and configuration using scripts or SDKsSecurity Compliance

Strong understanding of CIAM security risks and controls

Experience implementing privacy, consent, and data protection requirements

Familiar with OWASP Top 10, identity related threats, and mitigation techniques

Roles and responsibilities:

Design, implement, and operate CIAM solutions for customer and partner identities

Develop secure authentication and authorization flows for consumer facing applications

Implement and support Single SignOn (SSO)

Multi Factor Authentication (MFA)Social and password less login Integrate CIAM platforms with web, mobile, and API based applications

Design consent management, profile management, and privacy controls

Implement identity federation using modern protocols and standards

Support customer identity lifecycle management (registration, updates, deactivation)

Ensure scalability, performance, and high availability of CIAM platforms

Enforce security, privacy, and compliance standards (GDPR, CCPA, consent, data residency)

Troubleshoot authentication issues, performance bottlenecks, and integration defects Collaborate with application developers, security teams, and product owners

Support audits, threat modeling, and incident response related to customer identity

Create technical documentation, architecture diagrams, and operational runbooks