Security Architect, CIAM

Shape the future of secure digital identity for leading financial services organizations. The Role We are seeking a Security Architect with deep Customer Identity and Access Management (CIAM) expertise to support the delivery of large-scale digital identity transformation initiatives. You will play a critical role in assessing current-state capabilities, defining target-state architecture for MVP and future-state solutions, and driving secure, scalable customer identity strategies across enterprise environments. This role combines strategic architecture, hands-on delivery leadership, and stakeholder engagement within complex transformation programmes across financial services. This role can be full time or independent contractor and requires 4 days on site in downtown Toronto What You’ll Do Deliver technical capability assessments across CIAM environments and define strategic recommendations for modern identity ecosystems Define target-state architecture and capability roadmaps for MVP and future-state CIAM implementations Design and advise on customer identity and access management solutions including MFA, step-up authentication, ID proofing, and fraud prevention capabilities Collaborate with cross-functional delivery teams, security stakeholders, and client leadership to support successful programme delivery Provide architecture guidance across technologies including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring platforms What We’re Looking For 10+ years of proven experience delivering Security Architecture or CIAM transformation programmes within complex enterprise environments Strong expertise in Customer Identity and Access Management technologies including Ping Identity, Okta, and ForgeRock Experience designing authentication and identity verification capabilities including multifactor authentication, step-up authentication, and ID proofing Strong understanding of identity ecosystems including identity graph, identity fabric, behavioural analytics, device intelligence, and fraud scoring Excellent communication and stakeholder management skills with the ability to translate technical concepts into business outcomes Bonus Points For Experience working within financial services or highly regulated industries Knowledge of zero trust security principles and modern identity standards such as OAuth, OIDC, and SAML Experience supporting cloud-native identity transformation initiatives Exposure to fraud prevention and digital trust platforms Consulting or client-facing delivery experience within large transformation programmes Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions Work in a collaborative, flat, and entrepreneurial consulting culture Access continuous learning, training, and industry certifications Be part of a team shaping the future of digital financial services Help shape the future of digital transformation across FS & Energy Benefits Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution Virtual Health Care – Company-paid program available to all employees and their dependents/partners Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment Wellness Support – Fitness reimbursement benefit to promote health and well-being Business Coach from Day 1 – Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco Why This Role Is Open We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact. Inclusion at Capco We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day. Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination. AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams. Pay Transparency The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment. Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity. Canada Pay Transparency $153,000—$172,000 USD

The role involves defining target-state architecture and capability roadmaps for large-scale CIAM transformation initiatives within financial services. You will deliver technical assessments and design secure, scalable identity solutions including MFA and fraud prevention capabilities.

Candidates need over 10 years of experience in Security Architecture or CIAM transformation, with deep expertise in tools like Ping Identity, Okta, and ForgeRock. Strong knowledge of identity standards (OAuth, OIDC, SAML) and experience in highly regulated industries is preferred.

• Health Insurance • Life Insurance • Disability Insurance • Registered Retirement Savings Plan (RRSP) • Virtual Health Care • Employee & Family Assistance Program (EFAP) • Parental Leave Top-Up • Fitness Reimbursement • Professional Coaching

Identified from the job description. Confirm important requirements above.

• CIAM
• Security Architecture
• Ping Identity
• Okta
• ForgeRock
• MFA
• Identity Proofing
• Fraud Prevention
• OAuth
• OIDC
• SAML
• Zero Trust
• Stakeholder Management
• Identity Fabric
• Behavioral Analytics
• Cloud-Native Identity
• Forgerock
• Continuous Development
• Cloud-Native Computing
• Entrepreneurial Consulting
• Support Services
• Proofreading
• Virtual Health
• Technology Solutions
• Capability Assessment
• Digital Transformation
• Technology Ecosystems
• IT Security Architecture
• Artificial Intelligence
• Authentications
• Business Coaching
• Textiles
• Communication
• Consulting
• Multi-Factor Authentication
• Financial Services
• Leadership
• Scalability
• Identity And Access Management
• Reviewing Applications
• Coaching
• Security Assertion Markup Language (SAML)
• Stakeholder Engagement
• Scheduling
• Coordinating

• Security & Safety
• Technology
• Consulting
• Finance & Accounting
• Software
• Security Architect
• Software Architect (General)
• Software Developers

Minimum experience

10+ years

Posting language

English

Working hours

40 hours per week

Office presence

4 days per week