Role: Lead CIAM Architect Location: Remote with overlap to US Central working hours; up to two in-person workshops in St. Paul, Minnesota Duration: 6 Months
Key responsibilities •Define the requirements, weighted scoring model and scripts for the four journeys (customer self-service, B2B company administration, partner or reseller access, customer service) and agent delegated access, and secure sign-off from Architecture and IT Security. •Jointly work with product vendors to score from the sessions, recordings and notes •Classify each journey on each platform as native, configurable or custom build, and challenge vendor claims. •Produce the recommendation, fallback option and key contract terms, with the five-year cost model at current, 500,000 and 2,000,000 active users. •Design the target architecture: integration patterns, organisation and delegated administration model, agent access, consent handoff, security, data residency and environments. •Present findings to the Client's sponsor, Architecture and ITOC, and defend the decision pack. •Guide the migration architect on platform-specific constraints and review the migration plan and implementation estimate. •Sign and uphold the independence attestation and disclose any change in vendor relationships within two business days.
Required experience •15+ Years of experience in Identity and Access Management domain. •At least three enterprise CIAM implementations or migrations delivered in the last five years. •Hands-on delivery on at least two of Auth0, Ping Identity and Microsoft Entra External ID. •Experience migrating off Azure AD B2C custom policies. •Experience with B2B organisation models and delegated administration. •Proven ability to present to senior IT leadership and technical governance forums.
Desirable experience •GDPR and consent management in CIAM, including consent captured at the point of collection. •Authorisation patterns for AI agents acting on behalf of a user (token exchange, on-behalf-of access). •Integration with SAP or Salesforce. •Experience leading structured, scored vendor evaluations.
Skills and attributes •Deep knowledge of OIDC, OAuth 2.0, SAML, MFA and passwordless, and modern CIAM architecture. •Clear written and verbal communication, from engineers to executives. •Independent judgement, comfortable giving unwelcome findings with evidence. •Strong commercial awareness for cost models and contract terms.
Applicant Notices & Disclaimers
For information on benefits, equal opportunity employment, and location-specific applicant notices, click here
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.This position's pay range is $46.43/hr - $47.00/hr.
