Customer Identity Engineer - CIAM (Full Stack & Security) - Contract

We are seeking experienced Customer Identity Engineers (CIAM) for a major enterprise digital transformation program based in Sydney.

In this hands-on engineering role, you will be responsible for designing, building, and deploying secure, scalable customer authentication, authorization, and identity management solutions. Working at the intersection of full-stack software development, API security, and digital channels, you will play a central role in delivering seamless, frictionless, and secure identity experiences for millions of digital customers.

What You’ll Be Doing

• CIAM Platform Engineering: Build, integrate, and optimize enterprise Customer Identity and Access Management (CIAM) solutions across high-volume, customer-facing digital channels.

• Full Stack & API Development: Develop robust, secure services and APIs using Java or Node.js alongside modern web frameworks and microservices architectures.

• Authentication & Authorization: Implement modern identity standards including OAuth2, OIDC, SAML, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and emerging Passkey / Passwordless workflows.

• Identity Verification & Security: Integrate identity verification capabilities, biometric flows, and fraud detection mechanisms into customer onboarding and authentication journeys.

• DevOps & Quality Engineering: Embed CI/CD automated deployment pipelines, continuous testing, secure coding practices, and ongoing operational support for identity services.

• Cross-Functional Collaboration: Partner closely with Security Architects, Enterprise Solution Designers, and Digital Product Squads to deliver end-to-end identity features.

Core Requirements:

• CIAM Expertise: Strong, proven background engineering customer-facing identity, authentication, and access management solutions.

• Full Stack Development: Hands-on experience developing backend APIs and integrations using Java or Node.js, alongside modern digital web/mobile technologies.

• Identity Protocols: Deep practical understanding of OAuth 2.0, OpenID Connect (OIDC), SSO, MFA, and secure token management.

• Modern Auth Features: Experience building or integrating Passkeys, Passwordless authentication, or customer identity verification/KYC workflows.

• API & Application Security: Strong knowledge of OWASP standards, secure API engineering, encryption, and threat mitigation in customer platforms.

• Delivery & CI/CD: Familiarity with automated CI/CD pipelines, unit/integration testing, and maintaining production platform health.

• Location: Must be strictly based in Sydney and available to start ASAP.

Highly Regarded:

• Prior experience delivering CIAM solutions within Telecommunications, Banking, FinTech, or high-volume enterprise digital customer environments.

• Experience with major enterprise identity platforms (e.g., Ping Identity, Okta, ForgeRock, Auth0, or AWS Cognito).

Why join us:

NCS Australia is where you can feel at home, nurturing your talents and skills as we make tomorrow together, one day at a time. Our benefits include paid parental leave, initiatives focused on your well-being and discounted health insurance. You will also enjoy discounts on various products and services and be regularly recognised and rewarded for high performance. We are committed to your career development through our Capability Fingerprint, industry and partner training programs, special interest groups, and an AI-driven learning platform. No matter where you are in your career, we offer meaningful work and opportunities for growth.

NCS Australia is an equal-opportunity employer, and we take pride in our commitment to valuing and supporting our people and the communities we serve.We are dedicated to attracting, retaining and developing our people regardless of gender identity, ethnicity, sexual orientation, disability and age. Applications are encouraged from all sectors of the community and we strongly encourage applications from the Veterans, Aboriginal and/or Torres Strait Islander community.

At NCS Australia, we are committed to supporting adjustments throughout the recruitment and selection process, as well as during employment. We actively support and encourage people with disability to apply.

Agencies:

We’ve got this. We request that you do not contact NCS employees outside of the Talent Acquisition team. NCS exclusively accepts resumes from agencies on our preferred supplier panel through the NCS Agency Portal. Agencies that submit resumes must have a valid fee agreement and be assigned to the particular requisition by the Talent Acquisition team. Any resumes that are submitted outside of this process will become the sole property of NCS. If a candidate is hired outside of this process, no fee or payment will be given.

Work rights and background checks:

To be eligible for a position with us, applicants will need to have valid work rights for Australia and be willing to undergo a comprehensive background checking process, including probity and police checks