CIAM Architect

Job Title: CIAM Architect
Location: Hybrid (Plano, TX, New Jersey, Boston, Charlotte, NC)
Duration: 9 Months
 
Job Description

• Lead the implementation of secure single sign-on (SSO), federation, and identity lifecycle management workflows across cloud and hybrid environments.
• Deep knowledge of standards and protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, JWT, and modern web security (TLS, cookies, CORS).
• Strong understanding of directory services & identity stores: LDAP, Active Directory/Azure AD, and cloud directories.
• Integration skills with RESTful APIs and event-driven patterns; proficiency with JSON and secure token handling.
• Fraud detection & risk-based authentication: integrating risk scoring engines into CIAM flows.
• Design, develop, and maintain high-performance, scalable microservices using Java 17/21 and the Spring Boot ecosystem.
• Design and implement fine-grained access controls, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
• Integrate applications with enterprise IAM/IdP solutions (e.g., ForgeRock, Ping, Okta, Auth0, or AWS Cognito).
• Conduct threat modeling, code reviews, and vulnerability remediation to meet strict compliance standards.

 
Preferred Qualifications (Pluses)

• Experience with Transmit Security for identity orchestration, passwordless authentication, or advanced cross-channel journey management.

Experience with LexisNexis ThreatMetrix (or similar digital identity intelligence tools) for device fingerprinting, fraud detection, and risk-based step-up authentication. 

At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. This position's pay range is $85.00/hr – $95.00/hr.