CIAM Engineering Manager

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Clifton, NJPrinceton, NJ
Salary
$125,000–$215,000 / yr
Posted
1 day ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $213k
This role $170k
$109k most similar roles pay here $271k

This role pays less than 74% of similar roles. Most pay $170,000–$255,250 — the shaded band above. At the midpoint, this role pays about $170k versus about $213k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 191 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 186 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · CIAM Engineering Manager

The CIAM Engineering Manager joins the Customer Identity and Access Management team within Global Cybersecurity to drive the lifecycle of strategic components for external authentication products. This hands-on technical leadership role involves managing ForgeRock integrations for identity governance, designing automated IAM solutions, and overseeing projects involving access provisioning, deprovisioning, and role-based access control. The manager will troubleshoot system issues, provide mentorship to junior engineers, and develop architecture diagrams and standard operating procedures. Key technical requirements include proficiency in SAML, OAuth, OpenID Connect, LDAP, Active Directory, REST API principles, and SCIM. Candidates should possess experience with cloud platforms like Azure or AWS and a deep understanding of least privilege principles. The role focuses on solving complex identity governance challenges while ensuring security standards are met across enterprise technology assets to improve service delivery and scalability.

What you'll do

  • Manage the lifecycle of ForgeRock identity governance and administration integrations for provisioning, deprovisioning, and RBAC.
  • Design and implement automated IAM solutions to improve process efficiency and scalability.
  • Analyze and troubleshoot complex IAM system issues while performing root cause analysis to prevent recurrences.
  • Partner with IT, security, and application development teams to integrate IAM controls across enterprise assets.
  • Provide technical guidance and mentorship to junior engineers within the CIAM team.
  • Research emerging trends and technologies to drive continuous engineering improvements and innovation.
  • Create and maintain architecture diagrams, knowledge articles, and standard operating procedures for IAM infrastructure.

What we're looking for

  • Strong understanding of IAM principles including provisioning, deprovisioning, access reviews, RBAC, and least privilege.
  • Experience with cloud platforms (e.g., Azure, AWS) and hybrid identity environments.
  • Familiarity with identity protocols such as SAML, OAuth, OpenID Connect, LDAP, and Active Directory.
  • Familiarity with REST API principles, system-to-system authentication methods, and SCIM.
  • Excellent leadership and people management skills to build and motivate high-performing teams.
  • Ability to lead technical initiatives and drive results without direct managerial authority.
  • ForgeRock and/or AWS certifications (preferred).
  • Experience with other IAM tools like Okta, CyberArk, or Ping; knowledge of compliance frameworks such as SOX, HIPAA, or GDPR (preferred).

More like this

Similar roles

CIAM Engineer

State Street

Jersey City, NJ +1 6 days ago $100,000$167,500
ForgeRock IAM SAML OAuth OpenID Connect Active Directory LDAP SCIM REST API AWS Azure CyberArk Okta Ping RBAC Identity Governance Automation

CIAM Senior Architect Manager, VP

State Street

Clifton, NJ 19 days ago $125,000$226,250
CIAM SAML OpenID OAuth SCIM XACML SSO Federation API Gateways MFA PAM Risk Based Authentication ForgeRock AWS NIST SP800-63 SOA
5+ yrs exp

ICAM Systems Engineer & Manager

General Dynamics

MacDill AFB, FL 26 days ago $112,840$132,250
Active Directory Identity Management (IdM) Multi-Factor Authentication (MFA) Zero Trust DNS DHCP Group Policy Windows Server Attribute-Based Access Control (ABAC) NIST SP 800-207 RMF DISA STIGs Privileged Access Management (PAM) ITIL Agile PMP
5+ yrs exp

Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 10 days ago $61,900$141,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure

Senior CIAM Software Engineer

Affirm

Remote 163 days ago $195,000$255,000
OAuth 2.0 OIDC SAML SCIM Python Kotlin AWS Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C API Design Distributed Systems Buildkite GitHub
5+ yrs exp Remote

Staff CIAM Software Engineer

Affirm

Remote 38 days ago $230,000$290,000
Python Kotlin AWS Kubernetes MySQL Spark OAuth 2.0 OIDC SAML SCIM Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C Buildkite GitHub
5+ yrs exp Remote