About the job
Location: Remote Ho Chi Minh City, Vietnam
Job Title: Senior CIAM Architect Consultant
Department: Client Services
Reports to: Head of CIAM Architecture
The Opportunity
As a pivotal member of our Client Services team, you will act as the trusted authority on Customer Identity and Access Management (CIAM) for our corporate clients. This is a high-impact, customer-facing role where you will partner with enterprise architects and fellow consultants to design, validate, and deliver best-of-breed CIAM solutions.
Your primary mission is to bridge the gap between client vision and technical reality. You will leverage your deep architectural expertise and strategic consulting skills to discern not just what clients request, but what they truly require to achieve their strategic business objectives. Success in this role demands exceptional stakeholder engagement—from client-side architects and developers to business leaders and end-users—to gather empirical insights and ensure every implementation not only meets but consistently exceeds expectations.
Given the extensive interoperability of CIAM with diverse enterprise ecosystems, you will also liaise with external vendors and third-party engineers (e.g., those building customer portals). While your focus will remain on core architectural concerns such as system flow, integration patterns, and scalability, we highly value your insights into User Experience (UX) and User Interface (UI) design to ensure a seamless customer journey.
Above all, we are a security-obsessed organisation. We require a consultant who embeds a security-first mindset into every layer of the architecture, ensuring our solutions are robust, compliant, and trustworthy for both our clients and their customers.
Key Responsibilities
- Solution Architecture & Delivery: Lead the end-to-end design and implementation of complex CIAM solutions, ensuring alignment with client business goals and industry best practices.
- Strategic Consultation: Act as a strategic advisor, translating high-level business requirements into detailed technical roadmaps and clear, actionable use cases.
- Stakeholder Management: Facilitate and lead productive technical discussions with senior client stakeholders, including C-level executives, architects, and development teams.
- Integration & Interoperability: Design and oversee integrations across a broad technology landscape, ensuring seamless communication between CIAM platforms, customer portals, APIs, and legacy systems.
- Technical Governance: Define and enforce architectural standards, security protocols, and quality benchmarks throughout the project lifecycle.
- Cross-functional Collaboration: Work closely with internal delivery teams to guide development, troubleshoot complex issues, and ensure a smooth transition from design to deployment.
- Mentorship (Optional): While we welcome ambitious juniors, we are specifically seeking seasoned professionals who can serve as mentors and thought leaders within the practice.
Essential Requirements
- Proven Experience: A demonstrable track record in a senior IAM or CIAM architectural role. Experience with large-scale enterprise deployments is highly desirable.
- Deep Technical Acumen: Proficiency across a modern identity and cloud-native technology stack. Familiarity with the following is essential, and depth in several is required:
- Identity Protocols: SAML, OAuth 2.0, OpenID Connect (OIDC)
- Security Standards: OWASP Top 10, OSI model, fundamental cryptography
- Data Formats & Integration: XML, JSON, RESTful APIs
- Development & Scripting: Java, Python, Bash
- Infrastructure & Orchestration: Linux, Docker, Kubernetes, SQL
- Cloud Platforms: AWS (or equivalent)
- Modelling & Architecture: ArchiMate (or similar modelling notation)
- Front-End Technologies: HTML/CSS, JavaScript, Content Security Policy (CSP)
- Analytical Prowess: Exceptional problem-solving skills with the ability to navigate complex, ambiguous client environments and deduce clear, logical solutions.
- Communication & Influence: First-class communication skills, with the confidence to articulate intricate technical concepts to both technical and non-technical audiences, including senior management.
- Translational Ability: A proven capability to distil complex use cases into clear, concise, and compelling narratives that drive decision-making.
- Security-First Mindset: An unwavering commitment to security as a foundational principle, not an afterthought. You must possess a deep understanding of identity security threats and mitigation strategies.
Desirable Attributes
- Experience with CIAM-specific platforms (e.g., Auth0, Ping Identity, ForgeRock, Okta, Microsoft Entra ID).
- Familiarity with API gateway management and microservices architectures.
- Relevant professional certifications (e.g., CISSP, CCSP, AWS Certified Security, or vendor-specific IAM certifications).
About You
You are a seasoned consultant who thrives at the intersection of technology, strategy, and security. You possess the intellectual curiosity to continuously learn, the pragmatism to deliver, and the gravitas to influence enterprise-level decisions. If you are looking for a role where your architectural expertise will directly shape the digital identity strategies of leading organisations, we want to hear from you.