Applications Architect - CIAM

Job Profile Summary

Plans, develops, and manages the organization’s Customer Identity and Access Management (CIAM) solutions, ensuring secure, seamless, and scalable identity experiences for UPS customers. Aligns CIAM strategies with business needs through continual enhancements and adoption of modern identity technologies.

Job Description

Designs and implements CIAM architectures that deliver secure authentication, authorization, and identity lifecycle management for external customers. Ensures technical excellence and smooth integration of CIAM solutions across UPS platforms. Analyzes business requirements, security constraints, and compliance needs to recommend optimal identity solutions. Guarantees interoperability, usability, and adherence to privacy regulations.

Provides specialized expertise in identity management concepts, protocols (OAuth, OpenID Connect, SAML), and customer-centric security practices. This expertise is typically acquired through a combination of formal education and hands-on experience in identity and access management. May lead small teams or act as a “player coach,” but the primary focus is on technical leadership and subject matter expertise.

Requires deep knowledge of CIAM technologies and trends, including identity proofing, adaptive authentication, consent management, and fraud prevention. Interprets business challenges and recommends best practices for secure and frictionless customer experiences. Works independently, providing guidance in complex scenarios and leading CIAM-related projects.

Key Responsibilities

Business Partnership & Consulting

• Advises stakeholders on CIAM strategies to enhance customer trust and digital experience.
• Provides expert guidance on identity compliance (GDPR, CCPA) and security standards.
• Serves as a subject matter expert on emerging CIAM technologies and best practices.

Systems Thinking

• Collaborates across business and technology teams to design holistic CIAM solutions.
• Ensures alignment between identity processes, customer experience, and security policies.
• Evaluates impacts of CIAM changes on architecture, data privacy, and user workflows.

Technology Advising/Consulting

• Anticipates customer identity needs and recommends innovative CIAM capabilities.
• Partners with product teams to integrate identity services into customer-facing applications.
• Defines the future-state vision for CIAM architecture and technology roadmap.

Troubleshooting

• Leads resolution of complex identity-related issues, including authentication failures and integration challenges.
• Analyzes identity logs and patterns to detect anomalies and prevent fraud.
• Guides remediation strategies for security vulnerabilities in CIAM systems.

System and Technology Integration

• Designs and integrates CIAM platforms (e.g., Auth0, Okta, ForgeRock, Ping Identity) with UPS applications.
• Ensures seamless interoperability between identity services and business systems.

Architecture Design

• Leads CIAM architecture design projects, ensuring scalability, security, and compliance.
• Defines standards for identity federation, single sign-on (SSO), and multi-factor authentication (MFA).