Customer Identity and Access Management Specialist

Farm Credit East•Enfield, CT

7d•Hybrid

About The Position

The Customer Identity and Access Management Specialist serves as Farm Credit East’s subject matter expert for customer authentication, customer identity lifecycle, account linking, consent-aware access, and fine-grained authorization. The role defines and validates CIAM and FGA requirements; designs secure authorization models using relationship-based, role-based, and attribute-based controls; supports integration with the unified customer portal and enterprise applications; and ensures customer access decisions are least-privileged, resilient, privacy-aware, testable, and auditable. The position supports Farm Credit East staff through technology services that contribute to a high-quality customer and employee experience. It partners with digital portal, Salesforce FSC, nCino, integration, data, customer support, privacy, fraud, and application teams to deliver secure customer access while balancing security, privacy, accessibility, supportability, and customer experience. The role provides oversight and governance for CIAM and FGA environments, models, APIs, data integrations, application onboarding, identity and entitlement migration, testing, release readiness, operational support, and monitoring. Hybrid work options may be available after two weeks of employment, based on the role and manager discretion.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
At least 5 years of experience in IAM, CIAM, application security, digital identity, authorization engineering, or secure application integration.
Hands-on experience delivering customer authentication or fine-grained authorization capabilities for customer-facing applications.

Nice To Haves

Advanced degree or equivalent experience.
Financial-services or other regulated-industry experience.
CIAM, CISSP, CSSLP, CCSP, Microsoft identity, Okta/Auth0, or equivalent certifications.
OAuth/OIDC, API security, cloud security, or application security credentials.

Responsibilities

Lead requirements analysis for customer signup, login, MFA, account recovery, account linking, identity proofing touchpoints, profile management, session and token handling, and high-risk transactions.
Define customer identity sources, identifiers, identity correlation, account linking, customer and relationship attributes, lifecycle states, and dependencies needed for authorization design.
Translate customer journeys, personas, channels, systems, and acceptance criteria into CIAM requirements and a managed delivery backlog.
Partner with digital portal, Salesforce FSC, nCino, integration, data, customer support, privacy, fraud, and application teams to embed secure customer access.
Evaluate authentication and recovery controls while balancing security, privacy, accessibility, supportability, and customer experience.
Design and review fine-grained authorization models, including resource types, relationships, inheritance, roles, attributes, permissions, policy rules, and relationship tuples.
Apply ReBAC, RBAC, and ABAC patterns to enforce customer-data segregation, least privilege, role and relationship rules, consent restrictions, and deny-by-default behavior.
Define how fine-grained authorization stores and check APIs integrate with the CIAM platform, token issuance, application sessions, data sources, and consuming applications.
Establish policy ownership, approval, model promotion, versioning, exception, and change-governance processes.
Review tuple generation, caching, latency, availability, failure handling, and fallback behavior to prevent unauthorized access during service degradation.
Oversee and govern the build and configuration of CIAM and FGA environments, models, APIs, initial tuples, data integrations, and application onboarding.
Coordinate migration, reconciliation, and validation of customer identities, relationships, entitlements, and authorization data.
Develop and execute SIT, UAT, negative, regression, security, performance, resilience, and failure-mode tests, and trace results to requirements and acceptance criteria.
Validate policy simulation and authorization results for approved customer relationships, consent, sensitive data, and regulatory rules.
Support deployment, rollback planning, production readiness, hypercare, operational handoff, runbooks, and defect remediation.
Review access-control gaps and authorization designs for customer-data segregation, privacy requirements, consent, logging, investigation, and complaint support.
Define actionable audit logging for authentication and authorization decisions, model changes, tuple changes, policy exceptions, and administrative activity.
Design support processes for access-denied issues, account recovery escalations, manual review, fraud and security handoffs, and customer-facing support guidance.
Monitor authentication and authorization failures, policy anomalies, integrity issues, service health, and customer-impact trends; coordinate incident response and corrective action.

Benefits

Short-term incentive to reward business results.
401(k) match up to 6% of salary; verified student loan payments may qualify for an employer 401(k) match up to 6% for employees unable to take full advantage of the 401(k) match.
Defined contribution retirement plan funded at 2–9% of salary depending on years of service.
15–25 days of vacation leave per year, depending on years of service.
12 days of holiday leave per year.
7.5 days of sick leave in the first year, followed by 12 days per year thereafter, with unlimited rollover of unused sick leave.
Up to 80 hours of paid parental leave for birthing, non-birthing, and adoptive parents.
Additional family care leave options under FMLA and company policy.
Comprehensive medical, dental, and vision plans, including preventive care and wellness programs.
Health Savings Account.
Life insurance at 2x base pay.
Accidental Death and Dismemberment insurance at 2x base pay.
Long-term disability insurance at 2/3 base pay.
Tuition reimbursement.
Continuing education and training.
Employee Assistance Program offering tools and resources.