Customer Identity and Access Management Specialist

Requisition
2203
-Posted
10/15/2026

- Enfield, CT

- Enfield, CT

Be part of a team focused on enabling the success of Farm Credit East’s staff through world class technology support. Farm Credit East’s success is built on its ability to leverage technology and staff to provide a high-class customer and employee experience. This position provides staff the support and resources they need to provide the level of service Farm Credit East is known for.

We are One Team Working Together with a focus on our five pillars:
Outstanding Customer and Employee Experience, Quality Growth, Operational Excellence, Commitment to our Communities, and Protecting Customer Information.

The Customer Identity and Access Management Specialist serves as Farm Credit East’s subject matter expert for customer authentication, customer identity lifecycle, account linking, consent-aware access, and fine-grained authorization. The role defines and validates CIAM and FGA requirements, designs secure authorization models using relationship-based, role-based, and attribute-based controls, supports integration with the unified customer portal and enterprise applications, and ensures customer access decisions are least-privileged, resilient, privacy-aware, testable, and auditable.

T he value drivers for this role are as follows:

• Secure and Friction-Aware Customer Access
• Customer Data Segregation and Privacy
• Fine-Grained Authorization and Policy Governance
• Digital Portal Enablement
• Operational Resilience and Auditability

Duties and Responsibilities:

CIAM Product Delivery and Customer Identity Lifecycle

• Lead requirements analysis for customer signup, login, MFA, account recovery, account linking, identity proofing touchpoints, profile management, session and token handling, and high-risk transactions.
• Define customer identity sources, identifiers, identity correlation, account linking, customer and relationship attributes, lifecycle states, and dependencies needed before authorization design.
• Translate prioritized customer journeys, personas, channels, systems, and acceptance criteria into CIAM requirements and a managed delivery backlog.
• Partner with digital portal, Salesforce FSC, nCino, integration, data, customer support, privacy, fraud, and application teams to embed secure customer access.
• Balance security, privacy, accessibility, supportability, and customer experience when evaluating authentication and recovery controls.

Fine-Grained Authorization and Entitlement Engineering

• Design and review FGA authorization models, including resource types, relationships, inheritance, roles, attributes, permissions, policy rules and relationship tuples.
• Apply ReBAC, RBAC, and ABAC patterns to enforce customer-data segregation, least privilege, role/relationship rules, consent restrictions, and deny-by-default behavior.
• Define how FGA stores and check APIs integrate with the CIAM platform, token issuance, application sessions, data sources, and consuming applications.
• Establish policy ownership, approval, model promotion, versioning, exception, and change-governance processes.
• Review tuple generation, caching, latency, availability, failure handling, and fallback behavior to prevent unauthorized access during service degradation.

Integration, Migration, Testing and Release Readiness

• Provide oversight and governance for build and configuration of CIAM and FGA environments, models, APIs, initial tuples, data integrations, and application onboarding.
• Coordinate migration, reconciliation, and validation of customer identities, relationships entitlements, and authorization data.
• Develop and execute SIT, UAT, negative, regression, security, performance, resilience, and failure-mode…