Chief Architect - Customer Identity Access Management (CIAM)

Role Overview

The Chief Architect provides strategic and technical leadership to design and implement scalable, secure, and user-friendly customer access and identity management solutions. This role leads the Customer Identity and Access Management (CIAM) program, defining the overall architecture and strategy to ensure seamless customer access while maintaining robust security and compliance standards.

Responsibilities

• Lead the design and development of the CIAM architecture framework.
• Collaborate with business, security, and IT teams to gather requirements and translate them into technical solutions.
• Define the overall CIAM architecture and strategy aligned with business goals.
• Ensure secure, scalable, and seamless customer access management.
• Drive integration of CIAM solutions with existing and future systems.
• Establish best practices and governance for identity management.
• Evaluate and recommend CIAM technologies, platforms, and tools.
• Define integration patterns for customer identity data across systems.
• Develop security models, including authentication, authorization, and privacy controls.
• Provide guidance on compliance with data protection regulations such as GDPR and CCPA.
• Oversee proof-of-concept and pilot implementations.
• Create architectural documentation, standards, and guidelines.
• Mentor and guide development teams on CIAM best practices.
• Participate in risk assessments and mitigation planning related to identity management.

Requirements

• 10+ years of experience in software, application solutions, development, and architecture within highly regulated industries.
• 5+ years of experience designing and implementing Customer Identity and Access Management (CIAM) solutions.
• 1+ years of experience leading large-scale identity transformation programs.
• 1+ years of experience with integrating IAM/CIAM platforms with cloud and on-premise systems.
• Proven experience designing authentication, authorization, and identity lifecycle solutions.

Preferred Qualifications

• BS in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field.
• Experience with OAuth 2.0, Federation, and SSO.
• Experience with MFA and Passwordless Authentication.
• Technical experience with Ping Identity (platform) and DaVinci.
• Experience with AWS, Google, or Microsoft Cloud environments.

Compensation and Benefits

Pay Range: $182,700 - $238,700

Eligible employees may enroll in a variety of benefit programs, including:

• Competitive base pay and variable compensation opportunities.
• Health insurance, flexible spending accounts (FSA), and health savings accounts (HSA).
• Retirement savings plans with a generous company match to your 401(k).
• Life and disability insurance programs.
• Industry-leading tuition assistance program.
• Fertility, adoption, and surrogacy benefits.
• Up to $10,000 gift match for nonprofit organizations.
• Paid and unpaid time away from work.

Additional Information

• Application Deadline: July 4, 2026
• Shift: 1st shift.
• Visa Sponsorship: Employer will not sponsor applicants for employment visa status.
• Relocation: Relocation assistance is not available for this position.
• Export Control: This is not an Export Control position.
• Conflict of Interest: Successful candidates must satisfy a Conflict of Interest (COI) assessment process.
• Drug-Free Workplace: Post-offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when specific criteria are met.