CIAM Architect Manager, VP

State Street•Clifton, NJ

2d•$125,000 - $226,250•Onsite

About The Position

We are seeking an experienced Consumer / Customer Identity and Access Management (CIAM) Architect to develop patterns for lines of business to onboard to new CIAM platform. Candidate must have a strong background in designing CIAM architecture for large, complex CIAM environments. This role specifically aligns with our External Authentication products which provide solutions for clients globally. Our team consists of highly skilled technical experts across the globe. Your team has an amazing opportunity to make significant positive impact.

Requirements

Senior and experienced CIAM Architect (5-7 years) in creating reference and solution architecture (design pattern diagrams)
Good understanding of CIAM
Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth
Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services
Experience with App Gateways, App Proxies, Live Chat, Chat Bots, Contact Centers, IVRs and Web Portals for CIAM
Good understanding of MFA, PAM and Risk Based Authentication
Deep technical understanding of IAM solutions across multiple vendors. Like Microsoft and Okta
Experience with NIST SP800-63 Digital Authentication Standard

Nice To Haves

ForgeRock and/or AWS certifications (e.g., Identity Security Engineer).
Business outcomes mindset
Excellent interpersonal communication skills with strong spoken and written English
Collaborative team worker
Flexibility to accommodate working across different time-zones

Responsibilities

Development of CIAM omni-channel (Digital, Voice, Paper) standard patterns
Identification of and recommendations for leading digital experiences to serve as benchmarks for clients CIAM future state
Covers anticipated emerging digital experience trends
Covers the following pattern categories for CIAM: Registration / Onboarding, Authentication, Authorization, Third-party Service/API Access & Authorization, Invitation-Based User Registration, Multi-Branded User Registration & Authentication, User Access Delegation, User De-provisioning, Helpdesk Processes, Omnichannel Services "Overlay"
Evaluation of current processes against the defined industry and leading practices including industry standards such as the National Institute for Standards and Technology (NIST) Special Publication (SP) 800-63; Digital Authentication, NIST Cybersecurity Framework (CSF) and NIST SP 800-53; Security and Privacy Controls.
Development of findings and gaps based on analysis of current processes against the defined industry and leading practices.

Benefits

retirement savings plan (401K) with company match
insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
paid-time off including vacation, sick leave, short term disability, and family care responsibilities
access to our Employee Assistance Program
incentive compensation including eligibility for annual performance-based awards
eligibility for certain tax advantaged savings plans
inclusive development opportunities
flexible work-life support
paid volunteer days
vibrant employee networks