CIAM Architect Manager

We are seekingan experienced Consumer / Customer Identity and Access Management (CIAM) Architect to develop patterns for lines of business to onboard to new CIAM platform. Candidate must have a strong background in designing CIAMarchitecture for large, complex CIAM environments.

GCS CIAM Product Delivery Manager 6 Vice President (VP-640) Customer Identity and Access Management (CIAM) Role is to draft the architecture of CIAM components across State Street

Key Responsibilities:

• Development of CIAM omni-channel (Digital, Voice, Paper) standard patterns
• Includes identification of and recommendations for leading digital experiences to serve as benchmarks for clients CIAM future state
• Includes anticipated emerging digital experience trends
• Covers the following pattern categories for CIAM:
  • Registration / Onboarding
  • Authentication
  • Authorization
  • Third-party Service/API Access & Authorization
  • Invitation-Based User Registration
  • Multi-Branded User Registration & Authentication
  • User Access Delegation
  • User De-provisioning
  • Helpdesk Processes

• Omnichannel Services 4Overlay4
• Evaluation of current processes against the defined industry and leading practices including industry standards such as the National Institute for Standards and Technology (NIST) Special Publication (SP) 800-63; Digital Authentication, NIST Cybersecurity Framework (CSF) and NIST SP 800-53; Security and Privacy Controls.
• Development of findings and gaps based on analysis of current processes against the defined industry and leading practices.

Your team

Youll be working in the Customer Identity & Access Management Team which is part of Global Cybersecurity (GCS). This role specifically aligns with our External Authentication products which provide solutions for clients globally. Our team consists of highly skilled technical experts across the globe. Your team has an amazing opportunity to make significant positive impact.

Your expertise:

• Senior and experienced CIAM Architect (5-7 years) in creating reference and solution architecture (design pattern diagrams)
• Good understanding of CIAM
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services
• Experience with App Gateways, App Proxies, Live Chat, Chat Bots, Contact Centers, IVRs and Web Portals for CIAM
• Good understanding of MFA, PAM and Risk Based Authentication
• Deep technical understanding of IAM solutions across multiple vendors. Like Microsoft and Okta
• Experience with NIST SP800-63 Digital Authentication Standard
• Ability to work across teams

Plus if you have:

• ForgeRock and/or AWS certifications (e.g., Identity Security Engineer).
• Business outcomes mindset
• Excellent interpersonal communication skills with strong spoken and written English
• Collaborative team worker
• Flexibility to accommodate working across different time-zones

Salary Range:

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Streets comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.

For a full overview, visit https://hrportal.ehr.com/statestreet/Home.