Cyber Identity - CIAM Security Engineer/Consultant

Deloitte’s Cyber team is seeking a Security Engineer to support end-to-end CIAM engagements. This role focuses on designing, implementing, configuring, and supporting customer identity and access management solutions for clients throughout delivery and production support.

Role Overview

As a CIAM Security Engineer/Consultant, you will contribute to requirements gathering, solution design, testing, deployment, and ongoing production support across CIAM platforms. The work includes translating business and technical needs into secure, scalable identity solutions and delivery documentation that enables client readiness.

Key Responsibilities

• Support the design and implementation of Customer Identity and Access Management (CIAM) solutions aligned to client digital transformation and security objectives.
• Participate in end-to-end CIAM engagements, including requirements gathering, current-state assessment, solution design, testing, deployment, and production support.
• Configure and support CIAM capabilities across platforms including Transmit Security, Ping Federate, Okta, and ForgeRock, covering authentication, federation, registration, multi-factor authentication, adaptive access, and customer identity lifecycle processes.
• Convert business and technical requirements into scalable identity solutions and produce delivery artifacts such as documentation, process flows, and test plans.
• Collaborate with business stakeholders, cyber specialists, developers, testers, and alliance/vendor teams to drive delivery milestones, resolve issues, and build trusted client relationships through quality delivery.

Required Qualifications

• BA/BS Degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Finance, Business, or a relevant field.
• 2+ years of industry experience.
• 2+ years of experience within Identity and Access Management.
• 1+ years of hands-on experience customizing Transmit Security and Ping Identity tools (required).
• Ability to travel 25–50%, on average.
• Limited immigration sponsorship may be available.

Technologies and Protocols

• Transmit Security, Ping Federate, Okta, ForgeRock, Ping Identity
• SAML, OAuth, WS-Fed

Team Focus

• Enables trust and safety of online communications and digital products by protecting users, consumers, and patients from harm.
• Helps clients establish consumer confidence by ensuring integrity of access to data and clarity on with whom they are dealing.

Preferred

• Previous Consulting or Big 4 Project Management experience preferred.
• Certifications such as Ping Identity/Transmit Security certifications, CISSP, CISM, or CISA a plus.

Additional Preferred Skills (From the Listing)

• Design, develop, and implement secure and scalable CIAM solutions to support customer identity and access management infrastructure.
• Troubleshoot and resolve access-related issues and incidents efficiently.
• Integrate identity solutions such as Transmit Security and Ping Identity with diverse applications, directories, and identity sources.
• Foster close collaboration with application owners and teams to ensure seamless integration.
• Demonstrate a comprehensive understanding of advanced authentication protocols, including SAML, OAuth, and WS-Fed.
• Document configurations, processes, and procedures for maintenance and future reference.
• Identify and resolve performance bottlenecks and system issues proactively.

Location, Experience Level, and Education

• Location: Chicago, IL (onsite)
• Minimum Experience: 2 years
• Education: BA/BS Degree

Compensation

The wage range for this role, based on a wide range of factors used to determine compensation, is estimated at $82,600 to $162,800 per year.