Posted 9 months ago
CIAM Consultant
@ Querentia Inc.
Toronto, Ontario
Overview
Querentia Inc. is hiring a CIAM Consultant on a contract basis to design and deliver customer identity and access management solutions across cloud and hybrid environments. The work covers registration and authentication flows, federated identity, risk-based authentication, consent management and API security. The posting requires at least 4 years of IAM or CIAM delivery experience.
Responsibilities:
- Design and implement end-to-end CIAM solutions on Entra ID, ForgeRock, Ping, Okta or Auth0
- Integrate CIAM platforms with customer applications, APIs and legacy systems
- Produce architecture diagrams, technical documentation and implementation plans
- Engage client stakeholders and lead requirements workshops
- Mentor junior team members as a Senior Consultant
Requirements summary:
- 4+ years of IAM or CIAM delivery experience
- Hands-on experience with at least one CIAM platform
- Working knowledge of OAuth 2.0, OpenID Connect, SAML and REST APIs
- Experience with Azure, AWS or GCP
- Experience supporting CIAM implementation projects or integrations
Tools & skills
Source and dates
Source type not verified · jsonld
- Employer posting date
- 2026-02-09
- First seen by our source
- 2026-10-26
- Source record updated
- 2026-11-02
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Experience | 4+ years |
| Work setting | Office, Client sites |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Querentia Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 331 |
Role Overview: We are looking for a CIAM Consultant with experience delivering IAM and CIAM solutions across cloud and hybrid environments. The role involves designing and implementing end-to-end CIAM capabilities using platforms such as Microsoft Entra ID (Azure AD B2C), ForgeRock, Ping Identity, Okta, or Auth0.
Delivery & Technical Responsibilities
• Design, build, and implement CIAM solutions using platforms such as: Microsoft Entra ID (Azure AD B2C / External Identities);ForgeRock Identity Platform; Ping Identity (PingOne, PingFederate, PingAccess); Okta Customer Identity; Auth0
• Deliver end-to-end CIAM capabilities including: Customer registration and authentication flows; Social and federated identity integration; Adaptive and risk-based authentication; Consent and preference management; API security and token management (OAuth 2.0, OpenID Connect)
• Support solution architecture, technical design, and implementation across cloud and hybrid environments.
• Integrate CIAM platforms with customer-facing applications, APIs, and legacy systems.
• Contribute to identity governance, privacy-by-design, and regulatory compliance (e.g. GDPR).
• Engage with client stakeholders to understand business, security, and customer experience requirements.
• Translate business needs into technical CIAM solutions and roadmaps.
• Support workshops, requirement gathering, and design sessions.
• Produce high-quality deliverables including architecture diagrams, technical documentation, and implementation plans.
• Mentor junior team members and contribute to team capability development (Senior Consultant).
• Contribute to CIAM assets, accelerators, and methodologies.
• Support pre-sales activities, proposals, and client demos.
• Stay current with emerging identity standards, threats, and CIAM platform innovations.
Required Skills & Experience
• 4+ years of experience in IAM or CIAM delivery
• Hands-on experience with at least one CIAM platform -Entra ID, ForgeRock, Ping Identity, Okta, or Auth0
• Working knowledge of: OAuth 2.0, OpenID Connect, SAML, REST APIs and JSON, Cloud platforms (Azure, AWS, or GCP)
• Experience supporting CIAM implementation projects or system integrations.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.