IAM Engineer - CIAM

Job Description

The IAM Engineer – Customer Identity and Access Management (CIAM) is responsible for the hands-on design, development, automation and operational support of TAL’s customer identity services built on Okta. The role applies SecDevOps practices, including coding, automation, CI/CD and infrastructure as code, to deliver reliable and seamless identity capabilities across digital platforms, cloud environments and third-party services. Working closely with the IAM Engineering Lead, the role identifies control gaps, develops automated solutions and drives continuous improvement to ensure customer identity services remain secure, sustainable and aligned with business, customer experience and regulatory requirements.

In this role you will:

• Build and support CIAM services: Design, configure and support TAL’s Customer Identity and Access Management capabilities, including Okta, across customer registration, authentication, account recovery and identity lifecycle journeys.
• Engineer secure identity solutions: Develop and maintain secure application, API and partner integrations, applying authentication, authorisation, federation and Zero Trust principles.
• Drive automation and engineering excellence: Build automation, CI/CD pipelines and infrastructure as code using tools such as Terraform to improve efficiency, consistency and reliability.
• Strengthen identity security and controls: Assess and improve customer identity controls to protect customer information, reduce fraud and account takeover risk, and address control deficiencies and audit findings.
• Optimise and continuously improve CIAM: Diagnose complex technical issues, enhance Okta security capabilities and work across Security, Risk, Digital and Technology teams to improve the security, reliability and customer experience of CIAM services.
  
  Qualifications
  
  
• 3+ years’ experience in Identity and Access Management, Customer Identity and Access Management, or Cyber Security engineering, ideally within a customer-focused environment.
• Hands-on experience with Okta or an equivalent CIAM platform, including authentication, customer identity lifecycle management and modern identity security capabilities.
• Strong knowledge of identity and authentication standards, including OAuth 2.0, OpenID Connect, SAML, multi-factor authentication and Zero Trust principles.
• Strong coding and automation capability, using languages such as Python, JavaScript/TypeScript or Java, with experience building APIs, integrations and identity automation.
• Experience with modern SecDevOps practices, including CI/CD pipelines, infrastructure as code such as Terraform, Git-based version control and automated testing.