IAM / CIAM Architect

- Deep expertise in SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and their implementation across web, mobile, and API-based applications. - Hands-on experience with ForgeRock (AM, IDM, IG, DS) across architecture, development, integration, and production support. - Architect and deliver end-to-end CIAM solutions, including authentication, authorization, identity lifecycle management, and API security. - Strong understanding of modern digital experiences and how identity integrates with customer-facing web applications, mobile apps, and omnichannel journeys. - Partner with application, product, UX, and security teams to design secure, scalable, and user-friendly identity experiences. - Expertise in web technologies, browser security, cookies, CORS, session management, and modern authentication patterns. - Design and secure REST APIs using industry-standard identity and API security practices. - Provide technical leadership through architecture reviews, design guidance, and mentoring engineering teams. - Collaborate with platform and DevOps teams to deliver cloud-native identity solutions; AKS/Kubernetes experience is a plus. - Lead identity platform modernization initiatives, including migration to PingOne Advanced Identity Cloud (AIC). - Preferred Profile: A hands-on IAM Architect with experience building and integrating identity solutions directly into digital products and customer-facing applications, not just managing IAM platforms.