Job Description
🚨 Hiring: CIAM Engineering Lead – Java & ForgeRock 🚨
We are looking for a senior Customer Identity and Access Management (CIAM) Engineering Leader with a strong foundation in Java development, ForgeRock, and enterprise application security.
Contract Opportunity
🇨🇦 Location: Toronto
💰 Pay Rate: $96/hr. Incop
Key Focus Areas
🔹 Define and evolve the enterprise CIAM architecture and platform roadmap
🔹 Lead the design and modernization of platforms built using Java/J2EE, Spring Framework, Node.js, REST APIs, Kafka, and cloud technologies
🔹 Provide technical oversight across ForgeRock AM, IDM, and DS implementations
🔹 Govern identity federation, SSO, MFA, adaptive authentication, and API-based integrations
🔹 Establish secure implementation standards for OAuth 2.0, OpenID Connect, SAML, and LDAP
🔹 Guide application and digital-channel onboarding onto CIAM platforms
🔹 Lead architecture reviews, risk assessments, and security design decisions
🔹 Partner with engineering, cybersecurity, architecture, product, risk, and operations teams
🔹 Provide technical direction, coaching, and escalation support to CIAM engineering teams
Must-Have Experience
✅ 10+ years of experience designing, implementing, or modernizing enterprise platforms using Java/J2EE and Spring Framework
✅ 5+ years of technical leadership experience within CIAM or IAM
✅ Deep experience with ForgeRock AM, IDM, and DS
✅ Experience with Ping Identity, including PingFederate, PingAccess, or PingDirectory
✅ Expert knowledge of OAuth 2.0, OIDC, SAML, LDAP, SSO, MFA, and identity federation
✅ Experience defining IAM or CIAM architectures across AWS, Azure, or GCP
✅ Strong understanding of application security, cybersecurity risk, regulatory compliance, and enterprise control frameworks
Nice to Have
➕ Terraform and Infrastructure-as-Code
➕ Jenkins, CI/CD, and deployment automation
➕ Event-driven architecture and Kafka
➕ Okta or other SaaS identity platforms
➕ Experience preparing executive-level technical briefings and risk summaries
📩 Interested candidates can message me directly or share their resume.
No third parties or recruitment agencies, please.
