Back to results

Java CIAM Developer

  • Toronto, ON, Canada

Pay rate: $75 - $80 per hour · Contract

Applications open in a new tab.

Job details

Pay
Pay rate: $75 - $80 per hour
Job type
Contract
Apply by
Experience
5 years of experience in automating deployment processes and working with CI/CD tools (Jenkins, Google Cloud Deployment, etc.)
Posting language
English
Posted

Original job description

Work Style: Hybrid - Hybrid (3 days in office)

Location: Downtown Toronto

Anticipated Start Date: Dec 1, 2026

Pay rate: $75 - $80 per hour

End Client: Scotia Bank

Contract: 1 year term - 5yrs+ Sr Client Identity Access Management Developer with Java Backend API /Springboot skills.

  • Technical Must to have : PingIndentity or ForgeRock Identity

Contributes to the overall success of the Enterprise Customer Identity & Access Management (CIAM) Engineering function by ensuring that engineering initiatives, delivery plans, and strategic goals are executed effectively. The role ensures compliance with regulatory and internal policy requirements while championing customer?focused engineering and reliable identity services across the enterprise.

  • Is this role right for you? In this role you will:Drive the hands?on engineering, configuration, and integration of CIAM solutions that support enterprise security strategies, reliability standards, and digital identity modernization goals.
  • Implement, maintain, and continuously improve CIAM capabilities and supporting services.
  • Design and implement CIAM frameworks aligned with organizational security standards and regulatory requirements.
  • Develop and apply best practices for identity federation, SSO, MFA, OAuth2/OIDC flows, and adaptive authentication.
  • Ensure CIAM engineering work meets regulatory, compliance, and security requirements across channels and geographies.
  • Support onboarding, integration, and expansion of digital channels into CIAM platforms, ensuring stable and secure implementations.
  • Perform risk assessments and technical security reviews for CIAM integrations and recommend mitigation strategies.
  • Continuously refine and enhance deployment processes, onboarding workflows, and implementation guidelines.
  • Collaborate closely with internal engineering, product, security, and operations teams to ensure smooth and efficient adoption of CIAM services.
  • Provide expertise, guidance, and documentation to engineering teams and partner groups to support optimal use of CIAM platforms.
  • Create and maintain technical documentation, including architecture diagrams, configuration guides, troubleshooting guides, and operational procedures.
  • Establish effective working relationships across multiple technology and business partners, project teams, and stakeholders.
  • Understands how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
  • Champion a customer?focused engineering mindset and contribute to a collaborative and inclusive work environment.
  • Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:7+ years of hands-on experience on microservice implementation using Java/J2EE, Spring framework, Gradle, NodeJS, Restful APIs, Cloud SQL, and Kafka.
  • 5+ years of hands?on experience with major CIAM platforms, specifically ForgeRock (AM, IDM, DS), Ping Identity (PingFederate, PingAccess, PingDirectory), with exposure to Okta an asset.
  • 5 years of experience in automating deployment processes and working with CI/CD tools (Jenkins, Google Cloud Deployment, etc.)
  • Strong understanding of authentication and authorization protocols such as OAuth2, OpenID Connect, SAML, LDAP.
  • Proven ability to design and implement IAM solutions for enterprise and cloud environments (AWS, Azure, GCP).
  • Experience with identity federation, SSO, MFA, and adaptive authentication strategies.
  • Proficiency in DevOps tools (Terraform, CI/CD pipelines) for IAM deployment and automation.
  • Solid knowledge of cybersecurity principles, risk management, and compliance frameworks.
  • Excellent problem-solving and troubleshooting skills for complex IAM integrations. Strong work ethic and reliability
  • Excellent communication and time management skills
  • Experience delivering training using virtual conferencing
  • Ability to develop technical documentation, including architecture diagrams, configuration guides, and operational procedures.
  • Ability to prepare communications, briefings, and technical summaries for senior stakeholders when required.
  • Proven success working within a matrix organization and collaborating across cross?functional teams.
  • Strong prioritizing, planning, analytical, presentation, project/change management, and relationship building skills
More about this job

Responsibilities

Engineer, configure, integrate, and improve enterprise CIAM solutions, including identity federation, SSO, MFA, and adaptive authentication. Ensure secure, compliant, and reliable identity services while supporting integrations, deployment processes, documentation, and collaboration across engineering, security, product, and operations teams.

Requirements

Requires at least seven years of Java/J2EE and microservices experience, plus five or more years working with CIAM platforms such as ForgeRock or Ping Identity. Candidates should also have experience with CI/CD automation, cloud environments, identity protocols, security and compliance, technical documentation, and cross-functional collaboration.

Skills

  • Java
  • Spring Boot
  • Microservices
  • ForgeRock
  • Ping Identity
  • OAuth2
  • OpenID Connect
  • SAML
  • LDAP
  • Identity Federation
  • Single Sign-On
  • Multi-Factor Authentication
  • CI/CD
  • Terraform
  • Cloud Platforms
  • Cybersecurity

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Software
  • Security & Safety
  • Engineering

Keywords

  • Java
  • J2EE
  • Spring Framework
  • Spring Boot
  • Gradle
  • Node.js
  • REST APIs
  • Cloud SQL
  • Kafka
  • ForgeRock AM
  • ForgeRock IDM
  • ForgeRock DS
  • PingFederate
  • PingAccess
  • PingDirectory
  • Okta
  • Jenkins
  • Google Cloud Deployment
  • OAuth2
  • OpenID Connect
  • SAML
  • LDAP
  • Identity Federation
  • Single Sign-On
  • Multi-Factor Authentication
  • Adaptive Authentication
  • AWS
  • Azure
  • GCP
  • Terraform

Report this job