Customer Identity and Access Management (CIAM) Architect Lead @MarshTech

We are seeking a talented  Identity & Access Management (IAM) System Engineer to join our dynamic team.

This role will be based in Toronto - Bremner, Dublin - Charlotte or Cluj -Napoca office. This is a hybrid role that has a requirement of working at least three days a week in the office.

If you are passionate about security, cloud integrations, and cutting-edge IAM solutions, we want to hear from you!

As Customer Identity and Access Management (CIAM) Architect Lead is responsible for designing, solutioning and managing secure, scalable identity solutions that enhance customer experience while ensuring compliance and security. This role provides strategic design across CIAM services, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity governance, and lifecycle management.

The CIAM Architect Lead partners with business, security, and technology teams to deliver seamless and secure digital identity services. This role also drives continuous improvement, ensures high service quality, and oversees reporting, risk management, and compliance initiatives. The successful candidate will lead a regional team employees and consultants, and will be expected to be hands-on/skilled in our IAM tech stack.

We will count on you to:

Solution Design (30%) :

• Lead CIAM design and solutions, ensuring availability, reliability, user experience and performance of identity services

• Define and modernize customer access into Marsh identity and access management and systems

• Collaborate with technology, security, and application teams to align CIAM/IAM services with business needs, reduce complexities and risk reduction

• Build a design that support results of internal findings, business requirements, audit and ensure compliance with regulatory and internal security requirements

• Manage and mentor CIAM team members and vendors

Strategic Quality Improvement (20%) :

• Drive continuous improvement initiatives to enhance customer authentication and authorization experiences

• Analyze user journeys to reduce friction while maintaining strong security controls

• Design automation to improve user experience, access, authentication, provisioning, de-provisioning, and access workflows

• Provide solutions that will reduce/drive down KPIs and SLAs related to CIAM services and implement corrective actions

Technology Architecture (SSO, MFA, Identity Governance) (30%) :

• Design and transform CIAM architecture leveraging:

• Single Sign-On (SSO)

• Multi-Factor Authentication (MFA)

• Identity governance tools (e.g., SailPoint Identity Security Cloud - ISC)

• Design access request, certification processes, and LCM (joiner/mover/leaver) lifecycle

• Ensure secure integration with applications, APIs, and external identity providers

• Evaluate and recommend new CIAM technologies and enhancements

• Maintain architecture documentation, standards, and roadmaps

• Ensure scalability, resilience, and security of CIAM platforms/tools

Technology Oversight and Innovation (20%) :

• Define solution(s) in support of risk reduction related to complexities in architecture, identity metrics, access risks, and compliance status

• Provide solutions that will reduce risk, audit findings, remediation progress, and risk posture

• Provide regular updates to leadership on CIAM performance and initiatives

• Ensure proper governance over identity lifecycle and access certifications

• Support solutions for regulatory reporting and internal governance reviews

  Why join our team:

• We help you be your best through professional development opportunities, interesting work, and supportive leaders; 

• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities; 

• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being; 

For Romania- Cluj only:

• A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary); 

• 30+ days off (including legal days, birthday, public holiday replacements, and benefits options); 

• Performance bonus scheme; 

• Matching charity contributions, charity days off, and the Pay it Forward charity challenge; 

• Core benefits: Pension, Life and Medical Insurance, Meal Vouchers, Travel Insurance

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law. In accordance with the Accessibility for Ontarians with Disabilities Act, 2005, Marsh will provide a reasonable accommodation to employees and prospective employees to the point of undue hardship upon request and as required in respect of the individual’s particular restrictions and limitations. If you require a specific accommodation because of a disability or medical need, please contact View email address on careers.marsh.com.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.

This is a New position.