Customer Identity and Access Management (CIAM) Architect Lead @MarshTech
Marsh · Toronto - Bremner ·
- Work mode
- Hybrid
- Seniority
- Lead
- Category
- Security
Marsh · Toronto - Bremner ·
We are seeking a talented Identity & Access Management (IAM) System Engineer to join our dynamic team.
This role will be based in Toronto - Bremner, Dublin - Charlotte or Cluj -Napoca office. This is a hybrid role that has a requirement of working at least three days a week in the office.
If you are passionate about security, cloud integrations, and cutting-edge IAM solutions, we want to hear from you!
As Customer Identity and Access Management (CIAM) Architect Lead is responsible for designing, solutioning and managing secure, scalable identity solutions that enhance customer experience while ensuring compliance and security. This role provides strategic design across CIAM services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity governance, and lifecycle management.
The CIAM Architect Lead partners with business, security, and technology teams to deliver seamless and secure digital identity services. This role also drives continuous improvement, ensures high service quality, and oversees reporting, risk management, and compliance initiatives. The successful candidate will lead a regional team employees and consultants, and will be expected to be hands-on/skilled in our IAM tech stack.
We will count on you to:
Solution Design (30%):
Lead CIAM design and solutions, ensuring availability, reliability, user experience and performance of identity services
Define and modernize customer access into Marsh identity and access management and systems
Collaborate with technology, security, and application teams to align CIAM/IAM services with business needs, reduce complexities and risk reduction
Build a design that support results of internal findings, business requirements, audit and ensure compliance with regulatory and internal security requirements
Manage and mentor CIAM team members and vendors
Strategic Quality Improvement (20%):
Drive continuous improvement initiatives to enhance customer authentication and authorization experiences
Analyze user journeys to reduce friction while maintaining strong security controls
Design automation to improve user experience, access, authentication, provisioning, de-provisioning, and access workflows
Provide solutions that will reduce/drive down KPIs and SLAs related to CIAM services and implement corrective actions
Technology Architecture (SSO, MFA, Identity Governance) (30%):
Design and transform CIAM architecture leveraging:
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Identity governance tools (e.g., SailPoint Identity Security Cloud - ISC)
Design access request, certification processes, and LCM (joiner/mover/leaver) lifecycle
Ensure secure integration with applications, APIs, and external identity providers
Evaluate and recommend new CIAM technologies and enhancements
Maintain architecture documentation, standards, and roadmaps
Ensure scalability, resilience, and security of CIAM platforms/tools
Technology Oversight and Innovation (20%):
Define solution(s) in support of risk reduction related to complexities in architecture, identity metrics, access risks, and compliance status
Provide solutions that will reduce risk, audit findings, remediation progress, and risk posture
Provide regular updates to leadership on CIAM performance and initiatives
Ensure proper governance over identity lifecycle and access certifications
Support solutions for regulatory reporting and internal governance reviews
Why join our team:
We help you be your best through professional development opportunities, interesting work, and supportive leaders;
We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities;
Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being;
For Romania- Cluj only:
A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary);
30+ days off (including legal days, birthday, public holiday replacements, and benefits options);
Performance bonus scheme;
Matching charity contributions, charity days off, and the Pay it Forward charity challenge;
Core benefits: Pension, Life and Medical Insurance, Meal Vouchers, Travel Insurance