Build and maintain identity federation, authentication, and authorization flows (OIDC, OAuth2, SAML)
Configure and manage
User journeys / policies (B2C)
Identity providers (social, enterprise federation)
Conditional access and security controls for external users
Application Integration
Integrate CIAM services into externally facing applications and platforms
Partner with development teams to
Embed authentication and authorization flows
Ensure secure API access and token handling
Support onboarding of new applications into CIAM platforms
Troubleshoot identity-related issues across application integrations
Project Delivery
Lead or contribute to projects involving
B2C customer identity integrations
External partner onboarding (B2B federation)
Modernization of legacy authentication platforms
Translate business and security requirements into technical identity solutions
Support delivery within defined timelines and governance frameworks (e.g., change control, SDLC)
IAM Ecosystem Alignment
Ensure CIAM solutions align with broader IAM architecture, including
Identity Governance & Administration (IGA)
Privileged Access Management (PAM)
Collaborate with IAM, and architecture teams to ensure
Consistent identity policies
Centralized identity lifecycle practices
Secure access models across internal and external identities
Security, Compliance & Audit Readiness
Implement identity controls aligned with security policies and standards
Support compliance efforts including
SOX (Sarbanes-Oxley)
GxP (where applicable)
Produce and maintain documentation for
Solution design
Access controls
Audit evidence and control validation
Participate in internal and external audits as required
Operational Support
Provide L3 support for CIAM platforms and integrations
Monitor platform performance, availability, and security events
Support incident response activities related to identity and access issues
Identify and implement continuous improvements in CIAM processes
Required Skills & Experience
Core Technical Skills
Strong hands-on experience with
Microsoft Entra ID (EntraID)
EntraID B2C / Entra External ID
Experience implementing
OAuth2, OpenID Connect (OIDC), SAML
Identity federation and Single Sign-On (SSO)
Experience integrating identity solutions into web and mobile applications
Strong understanding of
Token-based authentication
API security concepts
CIAM Domain Expertise
Practical experience delivering B2B and B2C identity solutions
Understanding of customer identity lifecycle and external user management
Experience with custom policies, user flows, and identity providers in B2C
Broader IAM Awareness
Working knowledge of
Identity Governance & Administration (IGA) (e.g., SailPoint or similar)
Privileged Access Management (PAM) (e.g., CyberArk or similar)
Understanding of identity lifecycle, access certification, and privileged access controls
Desirable / Advantageous
Experience working in regulated environments (e.g., SOX, GxP)
Familiarity with secure SDLC and DevSecOps practices
Experience with API gateways, microservices architectures, or cloud-native application design
Scripting / automation experience (PowerShell, Python, etc.)
Experience with external identity providers and social login integrations
Key Competencies
Strong problem-solving and troubleshooting skills
Ability to translate business requirements into technical designs
Effective communication across technical and non-technical stakeholders
Structured, audit-aware approach to delivery and documentation
Ability to work across cross-functional teams in a global environment
Success Measures (First 6–12 Months)
Successful delivery of CIAM integrations into key external applications
Establishment of consistent B2C onboarding patterns and standards
Reduction in identity-related incidents for external-facing systems
Positive audit outcomes with clear and defensible identity controls
What ICON can offer you
Our success depends on the quality of our people. That’s why we’ve made it a priority to build a diverse culture that rewards high performance and nurtures talent.
In addition to your competitive salary, ICON offers a range of additional benefits. Our benefits are designed to be competitive within each country and are focused on well-being and work life balance opportunities for you and your family.
Our benefits examples include
Various annual leave entitlements
A range of health insurance offerings to suit you and your family’s needs.
Competitive retirement planning offerings to maximize savings and plan with confidence for the years ahead.
Global Employee Assistance Programme, LifeWorks, offering 24-hour access to a global network of over 80,000 independent specialized professionals who are there to support you and your family’s well-being.
Life assurance
Flexible country-specific optional benefits, including childcare vouchers, bike purchase schemes, discounted gym memberships, subsidized travel passes, health assessments, among others.
Visit our careers site to read more about the benefits ICON offers.
At ICON, inclusion & belonging are fundamental to our culture and values. We’re dedicated to providing an inclusive and accessible environment for all candidates. ICON is committed to providing a workplace free of discrimination and harassment. All qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or in order to perform the essential functions of a position, please let us know or submit a request here
Interested in the role, but unsure if you meet all of the requirements? We would encourage you to apply regardless – there’s every chance you’re exactly what we’re looking for here at ICON whether it is for this or other roles.
Are you a current ICON Employee? Please click here to apply
