Customer Identity and Access Management Specialist

Farm Credit East•Enfield, CT

1d•$85,000 - $105,000•Hybrid

About The Position

The Customer Identity and Access Management Specialist serves as Farm Credit East’s subject matter expert for customer authentication, customer identity lifecycle, account linking, consent-aware access, and fine-grained authorization. The role defines and validates CIAM and FGA requirements; designs secure authorization models using relationship-based, role-based, and attribute-based controls; supports integration with the unified customer portal and enterprise applications; and ensures customer access decisions are least-privileged, resilient, privacy-aware, testable, and auditable. The position supports Farm Credit East staff by providing technology expertise that contributes to a high-quality customer and employee experience. Its value drivers are secure and friction-aware customer access, customer data segregation and privacy, fine-grained authorization and policy governance, digital portal enablement, and operational resilience and auditability. The role works with digital portal, Salesforce FSC, nCino, integration, data, customer support, privacy, fraud, and application teams. Hybrid work options may be available after two weeks of employment, based on the role, customer and team needs, individual performance, and manager discretion.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
Minimum of 5 years of experience in IAM, CIAM, application security, digital identity, authorization engineering, or secure application integration.
Hands-on experience delivering customer authentication or fine-grained authorization capabilities for customer-facing applications.

Nice To Haves

Advanced degree or equivalent experience.
Financial-services or other regulated-industry experience.
CIAM, CISSP, CSSLP, CCSP, Microsoft identity, Okta/Auth0, or equivalent certifications.
OAuth/OIDC, API security, cloud security, or application security credentials.

Responsibilities

Lead requirements analysis for customer signup, login, MFA, account recovery, account linking, identity-proofing touchpoints, profile management, session and token handling, and high-risk transactions.
Define customer identity sources, identifiers, identity correlation, account linking, customer and relationship attributes, lifecycle states, and dependencies needed before authorization design.
Translate prioritized customer journeys, personas, channels, systems, and acceptance criteria into CIAM requirements and a managed delivery backlog.
Partner with digital portal, Salesforce FSC, nCino, integration, data, customer support, privacy, fraud, and application teams to embed secure customer access.
Balance security, privacy, accessibility, supportability, and customer experience when evaluating authentication and recovery controls.
Design and review fine-grained authorization models, including resource types, relationships, inheritance, roles, attributes, permissions, policy rules, and relationship tuples.
Apply ReBAC, RBAC, and ABAC patterns to enforce customer-data segregation, least privilege, role and relationship rules, consent restrictions, and deny-by-default behavior.
Define how FGA stores and check APIs integrate with the CIAM platform, token issuance, application sessions, data sources, and consuming applications.
Establish policy ownership, approval, model promotion, versioning, exception, and change-governance processes.
Review tuple generation, caching, latency, availability, failure handling, and fallback behavior to prevent unauthorized access during service degradation.
Provide oversight and governance for the build and configuration of CIAM and FGA environments, models, APIs, initial tuples, data integrations, and application onboarding.
Coordinate migration, reconciliation, and validation of customer identities, relationships, entitlements, and authorization data.
Develop and execute SIT, UAT, negative, regression, security, performance, resilience, and failure-mode tests; trace results to requirements and acceptance criteria.
Validate policy simulation and authorization results for approved customer relationships, consent, sensitive data, and regulatory rules.
Support deployment, rollback planning, production readiness, hypercare, operational handoff, runbooks, and defect remediation.
Review access-control gaps and authorization designs for customer-data segregation, privacy requirements, consent, logging, investigation, and complaint support.
Define actionable audit logging for authentication and authorization decisions, model changes, tuple changes, policy exceptions, and administrative activity.
Design support processes for access-denied issues, account-recovery escalations, manual review, fraud/security handoffs, and customer-facing support guidance.
Monitor authentication and authorization failures, policy anomalies, integrity issues, service health, and customer-impact trends; coordinate incident response and corrective action.

Benefits

Short Term Incentive to reward business results
401(k) match up to 6% of salary; verified student loan payments may qualify for an employer match in the 401(k) up to 6% of salary for those unable to take full advantage of the 401(k) match
Defined Contribution retirement plan funded at 2-9% of salary depending on years of service
15-25 days of vacation leave per year, depending on years of service
12 days of holiday leave per year
7.5 days of sick leave in the first year, followed by 12 days per year thereafter; unlimited rollover of unused sick leave
Up to 80 hours of paid parental leave for birthing, non-birthing, and adoptive parents
Additional Family Care Leave options under FMLA and company policy
Comprehensive medical, dental, and vision plans, including preventive care and wellness programs
Health Savings Account
Life insurance at 2x base pay
Accidental Death and Dismemberment insurance at 2x base pay
Long-term disability insurance at 2/3 base pay
Tuition reimbursement
Continuing education and training
Employee Assistance Program offering a wide variety of tools and resources
Hybrid work options after two weeks of employment, subject to role and business considerations and manager discretion