Customer Identity & Access Management (CIAM) Security Architecture Lead
Core
Architect and govern secure customer identity and access management (CIAM) across IDEXX's customer-facing ecosystem, leading the re-architecture of an existing Auth0 implementation to meet enterprise-scale security and scalability requirements.
Role type
Senior CIAM Security Architecture Lead
Builds
A hardened, scalable, and platform-agnostic CIAM foundation supporting multiple products, B2B/B2C use cases, and diverse authentication models (SSO, MFA, passwordless).
Domain
Cybersecurity, Identity & Access Management (IAM), Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
CIAM/IAM architecture, Auth0, OIDC, OAuth 2.0, SAML, FIDO2/WebAuthn, SCIM, Zero Trust principles, multi-tenant design, federated identity, API authentication, token lifecycle management, threat modeling, security governance
Preferred skills
Identity-as-Code, Terraform, CI/CD pipelines, fraud detection integration, regulated industry experience (healthcare/life sciences), Python/Java/Go scripting, AI/ML for anomaly detection
Technologies
Auth0, Okta CIAM, Ping Identity, ForgeRock, Microsoft Entra ID, AWS, SIEM/SOAR, IAM/IGA
Responsibilities
Assess and remediate existing Auth0 deployment; design enterprise CIAM architecture portable across platforms; establish security standards and guardrails; develop multi-year CIAM roadmap; architect secure authentication/authorization patterns and federated integrations; design multi-tenant and delegated access models; define system-to-system authentication patterns; validate security controls and integrate with broader security ecosystem; advise cross-functional teams on identity strategy and risk.
Seniority
Senior, hands-on IC with strategic leadership
