CIAM Engineer

State Street

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Jersey City, NJPrinceton, NJ
Salary
$100,000–$167,500 / yr
Posted
5 days ago
Freshness
Confirmed live yesterday
Nearby
99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $182k
This role $134k
$85k most similar roles pay here $237k

This role pays less than 83% of similar roles. Most pay $145,000–$219,256 — the shaded band above. At the midpoint, this role pays about $134k versus about $182k for comparable roles.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 183 open roles on FindRole.

Listed pay typically runs $120,000–$202,500 across 179 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · CIAM Engineer

Role Posting Log in to save

The CIAM Engineer joins the Customer Identity and Access Management team within Global Cybersecurity to manage lifecycle management integrations for Identity Governance and Administration, specifically utilizing ForgeRock. This technical leadership role involves designing and implementing IAM solutions, developing automation accelerators, and performing root cause analysis to ensure system reliability. The engineer will collaborate with IT and security teams to extend control solutions across enterprise assets while providing mentorship to junior engineers. Key technical requirements include proficiency in identity protocols like SAML, OAuth, OpenID Connect, and SCIM, along with experience in LDAP, Active Directory, and cloud platforms such as Azure or AWS. The role focuses on the specific domain of External Authentication products, solving complex challenges related to access provisioning, deprovisioning, role-based access control, and service account management for global clients.

Skills

ForgeRock IAM SAML OAuth OpenID Connect Active Directory LDAP SCIM REST API AWS Azure CyberArk Okta Ping RBAC Identity Governance Automation

What you'll do

  • Manage lifecycle management integrations for Identity Governance and Administration using ForgeRock.
  • Design and implement IAM solutions that align with organizational security standards.
  • Develop and implement automation tools to improve the efficiency of IAM processes.
  • Analyze, troubleshoot, and perform root cause analysis on complex IAM system issues.
  • Provide technical guidance and mentorship to junior engineers within the team.
  • Create and maintain architecture diagrams, knowledge articles, and standard operating procedures.
  • Research emerging trends and technologies to drive continuous engineering improvements.

What we're looking for

  • Strong understanding of IAM principles including provisioning, deprovisioning, access reviews, RBAC, and least privilege.
  • Familiarity with identity protocols such as SAML, OAuth, OpenID Connect, LDAP, and Active Directory.
  • Familiarity with REST API principles, system-to-system authentication methods, and SCIM.
  • Experience with cloud platforms (e.g., Azure, AWS) and hybrid identity environments.
  • Ability to lead technical initiatives and provide mentorship to junior engineers.
  • Excellent communication and collaboration skills.
  • ForgeRock and/or AWS certifications (preferred).
  • Experience with other IAM tools like Okta, CyberArk, or Ping; knowledge of compliance frameworks such as SOX, HIPAA, or GDPR (preferred).

Related searches

More CIAM Engineer jobs CIAM Engineer jobs in Jersey City All jobs at State Street

More like this

Similar roles

Senior CIAM Software Engineer

Affirm

Remote 162 days ago $195,000–$255,000
OAuth 2.0 OIDC SAML SCIM Python Kotlin AWS Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C API Design Distributed Systems Buildkite GitHub
5+ yrs exp Remote
Save

ICAM Systems Engineer & Manager

General Dynamics

MacDill AFB, FL 25 days ago $112,840–$132,250
Active Directory Identity Management (IdM) Multi-Factor Authentication (MFA) Zero Trust DNS DHCP Group Policy Windows Server Attribute-Based Access Control (ABAC) NIST SP 800-207 RMF DISA STIGs Privileged Access Management (PAM) ITIL Agile PMP
5+ yrs exp
Save

CIAM Senior Architect Manager, VP

State Street

Clifton, NJ 18 days ago $125,000–$226,250
CIAM SAML OpenID OAuth SCIM XACML SSO Federation API Gateways MFA PAM Risk Based Authentication ForgeRock AWS NIST SP800-63 SOA
5+ yrs exp
Save

Senior IAM Automation Engineer

Apex

Austin, TX 155 days ago $108,800–$136,000
Okta Entra ID Tines Terraform Python PowerShell Go Active Directory Adaxes AWS IAM GCP Cloud Identity SAML OIDC SCIM CI/CD Ansible Workday ServiceNow Slack Teams M365
7+ yrs exp Hybrid
Save

Staff CIAM Software Engineer

Affirm

Remote 37 days ago $230,000–$290,000
Python Kotlin AWS Kubernetes MySQL Spark OAuth 2.0 OIDC SAML SCIM Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C Buildkite GitHub
5+ yrs exp Remote
Save