Description

You will serve as a Senior Cybersecurity Specialist advising on product cybersecurity across the full development and operational lifecycle, focusing heavily on Consumer Identity and Access Management (CIAM) platforms.

Responsibilities

• Validate the implementation and governance of controls for identity provider (IdP) configuration and federation protocols (SAML, OIIDC).
• Evaluate authorization models, including RBAC, ABAC, and PBAC, and assess API security and token management.
• Assess adherence to CIAM governance frameworks, ensuring compliance with GDPR, CCPA, HIPAA, and PCI DSS standards.
• Review user lifecycle automation processes, including provisioning, deprovisioning, and account synchronization.
• Analyze identity-related risk management processes, change management, and vendor oversight.

Required Skills

• 5+ years of experience in identity architecture, access management, cybersecurity, or technology audit focused on CIAM governance.
• Deep understanding of authentication, authorization, and identity lifecycle management.
• Hands-on experience assessing CIAM platforms and identity federation protocols (SAML, OIIDC, OAuth).
• Knowledge of industry guidance like NIST SP 800-63B.
• Familiarity with modern authentication technologies such as WebAuthn and Passkeys.
• Knowledge of regulatory frameworks impacting consumer identity (GDPR, CCPA, HIPAA, PCI DSS).
• Skills in CISM, CISA, and CIAM principles.
• Experience evaluating security controls for MFA and adaptive authentication.

Key Skills

Education

Bachelor's degree