Customer Identity and Access Management; CIAM Architect Lead @MarshTech

Identity & Access Management (IAM) System Engineer

We are seeking a talented IAM System Engineer to join our dynamic team.

Location:

Toronto (Bremner), Dublin (Charlotte) or Cluj-Napoca office. This is a hybrid role that requires working at least three days a week in the office.

As a Customer Identity and Access Management (CIAM) Architect Lead, you will design, solution and manage secure, scalable identity solutions that enhance customer experience while ensuring compliance and security. You will provide strategic design across CIAM services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity governance, and lifecycle management.

You will partner with business, security and technology teams to deliver seamless and secure digital identity services. Your role also involves continuous improvement, high service quality, reporting, risk management and compliance initiatives. You will lead a regional team of employees and consultants, and be hands‑on with our IAM tech stack.

• Lead CIAM design and solutions, ensuring availability, reliability, user experience and performance of identity services.
• Define and modernize customer access into Marsh identity and access management and systems.
• Collaborate with technology, security and application teams to align CIAM/IAM services with business needs, reduce complexities and risk.
• Build a design that supports internal findings, business requirements, audit and ensures compliance with regulatory and internal security requirements.
• Manage and mentor CIAM team members and vendors.

• Drive continuous improvement initiatives to enhance customer authentication and authorization experiences.
• Analyze user journeys to reduce friction while maintaining strong security controls.
• Design automation to improve user experience, access, authentication, provisioning, de‑provisioning and access workflows.
• Provide solutions that will reduce KPIs and SLAs related to CIAM services and implement corrective actions.

• Design and transform CIAM architecture leveraging Single Sign‑On (SSO), Multi‑Factor Authentication (MFA) and identity governance tools (e.g., SailPoint Identity Security Cloud).
• Design access request, certification processes, and LCM (joiner/mover/leaver) lifecycle.
• Ensure secure integration with applications, APIs and external identity providers.
• Evaluate and recommend new CIAM technologies and enhancements.
• Maintain architecture documentation, standards and roadmaps.
• Ensure scalability, resilience and security of CIAM platforms and tools.

• Define solutions that support risk reduction related to complexities in architecture, identity metrics, access risks and compliance status.
• Provide solutions that reduce risk, audit findings, remediation progress and risk posture.
• Provide regular updates to leadership on CIAM performance and initiatives.
• Ensure proper governance over identity lifecycle and access certifications.
• Support solutions for regulatory reporting and internal governance reviews.

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well‑being.

• A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary).
• 30+ days off (including legal days, birthday, public holiday replacements and benefits options).
• Performance bonus scheme.
• Matching charity contributions, charity days off and the Pay it Forward charity challenge.
• Core benefits: pension, life and medical insurance, meal vouchers, travel insurance.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and to embrace diversity of age background,…