CIAM Full Stack Engineer

Manulife • Boston, MA

2d • Hybrid

About The Position

Build and support secure, seamless Customer Identity & Access Management (CIAM) experiences across Manulife’s digital channels. Develop customer-facing applications and services using React and Node.js, contributing to registration, authentication, multi-factor authentication (MFA), consent, profile management, and account recovery. Work with the CIAM team to turn customer and business needs into reliable software, apply modern identity standards and secure engineering practices, and improve customer journeys and identity-service operations.

The role includes developing and maintaining full-stack capabilities, APIs, and backend services; integrating digital applications with CIAM platforms; implementing authentication and authorization flows; and collaborating with product, design, architecture, and security partners. It also includes testing, secure coding, CI/CD and cloud deployment contributions, monitoring and troubleshooting, production support, documentation, and knowledge sharing. The position is a hybrid role based in Boston, Massachusetts, and is an existing vacancy.

Requirements

• At least 3 years of software engineering experience building or supporting production web applications.
• Hands-on experience with React and modern JavaScript or TypeScript.
• Experience building backend services or APIs with Node.js.
• Experience designing or integrating REST APIs and working with distributed systems.
• Understanding of identity and access management concepts, preferably including OIDC/OAuth2, SAML, and JWT.
• Familiarity with authentication, authorization, MFA, or other customer identity capabilities.
• Understanding of secure coding practices, code reviews, and automated testing.
• Experience with source control, build tools, testing frameworks, and CI/CD workflows.
• Experience deploying or supporting cloud-based applications.
• Strong troubleshooting, communication, and collaboration skills.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.

Nice To Haves

• Azure experience.
• Experience with enterprise CIAM platforms such as IBM Security Verify, RSA, or comparable identity providers.
• Familiarity with WebAuthn/FIDO2, passkeys, adaptive authentication, device intelligence, identity proofing, or bot mitigation.
• Exposure to Azure services such as App Services, Functions, API Management, Key Vault, Azure Monitor, or Application Insights.
• Familiarity with containers, infrastructure as code, or cloud-native application design.
• Experience building accessible, internationalized, and responsive customer experiences.
• Exposure to observability tools such as Azure Monitor, Application Insights, Datadog, or Splunk.
• Financial services, insurance, or other regulated-industry experience.
• Experience working in Agile teams and with delivery tools such as Azure DevOps, Jira, or GitHub.
• Relevant cloud, software engineering, identity, or security certifications.

Responsibilities

• Develop, test, and maintain full-stack CIAM capabilities using React, Node.js, and related technologies.
• Build accessible, responsive customer experiences for registration, sign-in, MFA, consent, profile management, and account recovery.
• Develop and maintain APIs and backend services supporting identity journeys and application integrations.
• Integrate digital applications with CIAM platforms using standards-based protocols such as OIDC/OAuth2, SAML, SCIM, and JWT.
• Implement authentication, authorization, token handling, session management, and logout flows according to established security practices.
• Collaborate with product owners, designers, architects, and security teams to refine requirements and deliver maintainable solutions.
• Contribute to technical designs, API contracts, development standards, and reusable components.
• Apply secure coding practices and address vulnerabilities through code reviews, automated testing, and dependency updates.
• Build and maintain unit, integration, and end-to-end tests for applications, services, and identity journeys.
• Contribute to CI/CD pipelines and deployment configurations that support safe, repeatable releases.
• Help deploy and support cloud-based solutions, preferably on Azure.
• Use logs, metrics, traces, and alerts to troubleshoot issues and improve reliability.
• Participate in production support, incident response, root-cause analysis, and continuous improvement.
• Work with fraud and risk teams to support risk signals and adaptive authentication.
• Document technical designs, integration patterns, and operational procedures.
• Share knowledge and contribute to strong engineering practices across the team.

Benefits

• Health insurance
• Dental insurance
• Mental health benefits
• Vision insurance
• Short- and long-term disability insurance
• Life and AD&D insurance
• Adoption and surrogacy benefits
• Wellness benefits
• Employee and family assistance plans
• Retirement savings plans, including pension and 401(k) savings plans
• Global share ownership plan with employer matching contributions
• Financial education and counseling resources
• Up to 11 paid holidays, 3 personal days, 150 hours of vacation, and 40 hours of sick time annually (or more where required by law)
• Statutory leaves of absence
• Incentive programs and incentive compensation tied to business and individual performance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level