Security Architect, CIAM

We are seeking a Security Architect with deep Customer Identity and Access Management (CIAM) expertise to support the delivery of large-scale digital identity transformation initiatives. You will play a critical role in assessing current-state capabilities, defining target-state architecture for MVP and future-state solutions, and driving secure, scalable customer identity strategies across enterprise environments.

This role combines strategic architecture, hands-on delivery leadership, and stakeholder engagement within complex transformation programmes across financial services.

• →Deliver technical capability assessments across CIAM environments and define strategic recommendations for modern identity ecosystems
• →Define target-state architecture and capability roadmaps for MVP and future-state CIAM implementations
• →Design and advise on customer identity and access management solutions including MFA, step-up authentication, ID proofing, and fraud prevention capabilities
• →Collaborate with cross-functional delivery teams, security stakeholders, and client leadership to support successful programme delivery
• →Provide architecture guidance across technologies including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring platforms

• 10+ years of proven experience delivering Security Architecture or CIAM transformation programmes within complex enterprise environments
• Strong expertise in Customer Identity and Access Management technologies including Ping Identity, Okta, and ForgeRock
• Experience designing authentication and identity verification capabilities including multifactor authentication, step-up authentication, and ID proofing
• Strong understanding of identity ecosystems including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring
• Excellent communication and stakeholder management skills with the ability to translate technical concepts into business outcomes

• Experience working within financial services or highly regulated industries
• Knowledge of zero trust security principles and modern identity standards such as OAuth, OIDC, and SAML
• Experience supporting cloud-native identity transformation initiatives
• Exposure to fraud prevention and digital trust platforms
• Consulting or client-facing delivery experience within large transformation programmes

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.