Senior IAM Engineer
Core
Lead the design and delivery of modern customer and workforce identity solutions, replacing legacy platforms and improving secure access across AFCA's digital ecosystem.
Role type
Senior IC Identity and Access Management (IAM) Engineer
Builds
Next-generation identity capability for customer (CIAM) and workforce identity
Domain
Financial services / Identity and Access Management
Deliverable
production ML models | product features
Required skills
Enterprise WIAM/CIAM solution design, modern identity platforms (Entra ID, Okta, Auth0), authentication protocols (OAuth 2.0, OIDC, SAML), identity lifecycle management, access governance, RBAC, MFA, conditional access, identity automation, infrastructure as code, CI/CD, migration from legacy federation/directory platforms, split identity models, Microsoft Entra ID Governance, SCIM provisioning
Preferred skills
Identity, cloud, or security certifications (Microsoft, Okta, Auth0, CISSP, CCSP, CIAM)
Technologies
Microsoft Entra ID, Entra External ID, Okta, Auth0, OAuth 2.0, OIDC, SAML, SCIM
Responsibilities
Own IAM solution design and implementation across CIAM and workforce identity; Define target-state architecture, migration pathways and transition roadmaps; Design secure integrations for applications, APIs and digital channels; Implement identity lifecycle management, access governance, RBAC and least privilege; Strengthen controls including MFA, conditional access and modern authentication; Provide hands-on technical leadership and guide delivery teams through complex decisions
Seniority
Senior, hands-on IC