Description :
Job Role / Title : Solution Architect
Experience : 10 14 yrs
Location : Remote / 6 month project
Solution Architect : B2C IAM
Job Brief :
We are seeking a highly skilled and experienced Solution Architect to design and implement a robust, scalable, and secure Business-to-Consumer (B2C) Identity and Access Management (CIAM) solution.
This role is pivotal in shaping the technical vision and architecture for our customer identity platform, ensuring a seamless and secure user experience across a diverse ecosystem of applications.
The successful candidate will be responsible for defining the architecture for fine-grained authorization, leveraging an Attribute-Based Access Control (ABAC) or Policy-Based Access Control (PBAC) model.
This will be a multi-faceted project, involving the integration of both SaaS and in-house built applications, communicating via SOAP and REST services. A good understanding of Azure Integration Services is essential to connect these disparate systems effectively.
The Solution Architect will work closely with business stakeholders, product managers, security teams, and developers to translate business requirements into a cohesive technical design.
A key aspect of this role will be the evaluation of third-party vendors and technologies, including the review of Requests for Proposal (RFPs), to ensure the chosen solution aligns with our long-term strategy, technical requirements, and budget.
This is a critical role that requires a blend of technical expertise, strategic thinking, and strong communication skills to drive the project from conception through to a successful, secure, and scalable deployment.
Core Responsibilities :
- Architectural Design : Lead the design and documentation of a comprehensive, end-to-end B2C IAM solution, including the identity lifecycle, authentication, and authorization components.
- Authorization Strategy : Define and architect a fine-grained authorization framework, utilizing an Attribute-Based Access Control (ABAC) model to ensure dynamic, context-aware access decisions.
- Vendor & Technology Selection : Lead the technical evaluation of CIAM vendors and platforms. This includes reviewing vendor responses, and participating in the selection process to ensure the chosen technology meets our strategic, functional, and non-functional requirements.
- Integration & Connectivity : Design and oversee the integration of the CIAM solution with SaaS and custom-built applications, leveraging Azure Integration Services (e.g., Logic Apps, API Management, Service Bus) for both SOAP and REST services.
- Federation & Single Sign-On (SSO) : Architect identity federation solutions to enable seamless SSO experiences for our customers, utilizing modern protocols such as OAuth2.0, OpenID Connect (OIDC), and SAML 2.0.
- Security & Compliance : Ensure the CIAM solution adheres to the highest security standards and regulatory compliance requirements (e.g., GDPR, CCPA).
- Technical Leadership : Provide technical guidance and mentorship to development teams, ensuring the solution design is accurately implemented and follows best practices.
- Stakeholder Communication : Effectively communicate complex technical concepts and architectural decisions to both technical and non-technical stakeholders.
Required Skills & Experience :
IAM / CIAM Expertise :
Proven experience as a Solution Architect with a focus on B2C IAM solutions.Expertise in designing and implementing fine-grained authorization models, specifically ABAC.In-depth knowledge of identity federation protocols, including OAuth 2.0, OIDC, and SAML 2.0.Experience with major B2C IAM platforms (e.g., Azure AD B2C, Okta, ForgeRock, Ping Identity).Integration & Cloud :
Extensive experience with Azure services, particularly Azure Integration Services (Logic Apps, API Management, Service Bus).Strong understanding of API design and best practices for both SOAP and REST services.Proficiency in designing and implementing secure APIs and integration patterns in a cloud environment.Authorization & Security :
Demonstrated experience in designing and implementing Attribute-Based Access Control (ABAC). This includes defining policies, managing attributes, and integrating a policy decision point (PDP) and policy enforcement point (PEP) into the application architecture.Familiarity with other authorization models, such as Role-Based Access Control (RBAC) and Policy-Based Access Control (PBAC).A solid understanding of security principles, including encryption, certificates, threat modeling, and vulnerability management.Vendor & Strategy :
Ability to conduct comprehensive technical and financial analysis of vendor proposals and make data-driven recommendations.A keen awareness of the IAM market landscape, including emerging vendors and technology trends.Technical & Soft Skills :
Strong analytical and problem-solving skills with the ability to troubleshoot complex technical issues.Excellent written and verbal communication skills, with the ability to create clear, concise technical documentation and architectural diagrams.Experience in an Agile development environment and working with DevOps principles.Ability to manage multiple stakeholders and drive consensus on technical solutions.(ref : hirist.tech)