Description

You will advise on and support cybersecurity across the product development and operational lifecycle, specifically focusing on Customer Identity and Access Management (CIAM) governance.

Responsibilities

• Validate the implementation and governance of identity provider (IdP) configuration and federation protocols (e.g., SAML, OIDC).
• Evaluate authorization models, including RBAC, ABAC, and PBAC, and assess API security and token management.
• Assess and validate adherence to CIAM governance frameworks, ensuring compliance with GDPR, CCPA, HIPAA, and PCI DSS.
• Review user lifecycle automation processes, including provisioning and deprovisioning, and validate logging/SIEM integration.
• Analyze identity-related risk management processes and verify configuration control procedures.

Required Skills

• 5+ years of experience in identity architecture, access management, cybersecurity, or technology audit focused on CIAM governance.
• Deep understanding of authentication, authorization, and identity lifecycle management.
• Hands-on experience assessing CIAM platforms and identity federation protocols (SAML, OIDC, OAuth).
• Knowledge of industry guidance related to digital authentication and lifecycle management (e.g., NIST SP 800-63B).
• Familiarity with modern authentication technologies such as WebAuthn and Passkeys.
• Knowledge of regulatory frameworks impacting consumer identity (e.g., GDPR, CCPA, HIPAA, PCI DSS).
• Experience assessing controls for MFA, adaptive authentication, and password requirements.
• Experience with Auth0 platform configuration and governance.

Key Skills

Education

Bachelor's degree