{"id":3235899,"url":"https://alion.io/job/icon-ciam-engineer","title":"CIAM Engineer","company":{"id":5677,"name":"ICON","domain":"iconplc.com","url":"https://alion.io/company/icon","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":49,"ghost_share":0,"stale_share":0.98,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India","Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-08T00:00:00Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-30T05:43:18Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"CIAM Engineer - Bangalore / ChennaiICON is a global healthcare intelligence and clinical research organisation united by a mission to bring new medicines and treatments to patients faster.\nAs a values-driven organisation, integrity, collaboration, agility, and inclusion are at the heart of how we work and interact with each other, customers, patients and suppliers.\nRole: CIAM (Customer Identity & Access Management) Specialist / Engineer\nRole Overview\nThe CIAM Specialist/Engineer will be responsible for designing, implementing, and supporting customer identity solutions across the organization, with a focus on secure, scalable, and compliant access for external users (B2B and B2C).\nThis role will play a key part in integrating customer identity services into externally facing applications, leveraging Microsoft Entra ID (including External ID / B2C capabilities), while aligning with enterprise IAM standards, security controls, and regulatory requirements.\nThe position operates within the broader IAM function and will collaborate closely with application teams, security architecture, and engineering teams to deliver robust and audit-compliant identity integrations.\nKey Responsibilities\nCIAM & External Identity Engineering\nDesign, implement, and maintain CIAM solutions supporting B2B and B2C identity use cases\nDevelop and manage Microsoft Entra ID (EntraID) and Entra External ID / B2C configurations\nBuild and maintain identity federation, authentication, and authorization flows (OIDC, OAuth2, SAML)\nConfigure and manage:User journeys / policies (B2C)\nIdentity providers (social, enterprise federation)\nConditional access and security controls for external users\n\nApplication Integration\nIntegrate CIAM services into externally facing applications and platforms\nPartner with development teams to:Embed authentication and authorization flows\nEnsure secure API access and token handling\n\nSupport onboarding of new applications into CIAM platforms\nTroubleshoot identity-related issues across application integrations\nProject Delivery\nLead or contribute to projects involving: B2C customer identity integrations\nExternal partner onboarding (B2B federation)\nModernization of legacy authentication platforms\n\nTranslate business and security requirements into technical identity solutions\nSupport delivery within defined timelines and governance frameworks (e.g., change control, SDLC)\nIAM Ecosystem Alignment\nEnsure CIAM solutions align with broader IAM architecture, including:Identity Governance & Administration (IGA)\nPrivileged Access Management (PAM)\n\nCollaborate with IAM, and architecture teams to ensure:Consistent identity policies\nCentralized identity lifecycle practices\nSecure access models across internal and external identities\n\nSecurity, Compliance & Audit Readiness\nImplement identity controls aligned with security policies and standards\nSupport compliance efforts including:SOX (Sarbanes-Oxley)\nGxP (where applicable)\n\nProduce and maintain documentation for:Solution design\nAccess controls\nAudit evidence and control validation\n\nParticipate in internal and external audits as required\nOperational Support\nProvide L3 support for CIAM platforms and integrations\nMonitor platform performance, availability, and security events\nSupport incident response activities related to identity and access issues\nIdentify and implement continuous improvements in CIAM processes\nRequired Skills & Experience\nCore Technical Skills\nStrong hands-on experience with: Microsoft Entra ID (EntraID)\n EntraID B2C / Entra External ID\n\nExperience implementing:OAuth2, OpenID Connect (OIDC), SAML\nIdentity federation and Single Sign-On (SSO)\n\nExperience integrating identity solutions into web and mobile applications\nStrong understanding of:Token-based authentication\nAPI security concepts\n\nCIAM Domain Expertise\nPractical experience delivering B2B and B2C identity solutions\nUnderstanding of customer identity lifecycle and external user management\nExperience with custom policies, user flows, and identity providers in B2C\nBroader IAM Awareness\nWorking knowledge of: Identity Governance & Administration (IGA) (e.g., SailPoint or similar)\n Privileged Access Management (PAM) (e.g., CyberArk or similar)\n\nUnderstanding of identity lifecycle, access certification, and privileged access controls\nDesirable / Advantageous\nExperience working in regulated environments (e.g., SOX, GxP)\nFamiliarity with secure SDLC and DevSecOps practices\nExperience with API gateways, microservices architectures, or cloud-native application design\nScripting / automation experience (PowerShell, Python, etc.)\nExperience with external identity providers and social login integrations\nKey Competencies\nStrong problem-solving and troubleshooting skills\nAbility to translate business requirements into technical designs\nEffective communication across technical and non-technical stakeholders\nStructured, audit-aware approach to delivery and documentation\nAbility to work across cross-functional teams in a global environment\nSuccess Measures (First 6-12 Months)\nSuccessful delivery of CIAM integrations into key external applications\nEstablishment of consistent B2C onboarding patterns and standards\nReduction in identity-related incidents for external-facing systems\nPositive audit outcomes with clear and defensible identity controls\nEmployment with ICON is contingent upon having the legal right to work in the country where the role is based.\nRewards & Benefits\nICON offers a competitive and comprehensive total rewards package designed to support your health, wellbeing, and career development.\nBenefits may include:\nCompetitive base salary and performance related incentives\nHealth and wellbeing programmes including medical, dental, and vision coverage where applicable\nRetirement and pension plans\nLife assurance and disability coverage\nEmployee assistance programmes and wellbeing resources\nLearning and development opportunities through structured training and career pathways\nBenefits may vary depending on role and location.\nVisit our careers site to read more about the benefits ICON offers.\nInclusion and Accessibility\nICON is an equal opportunity employer. We are committed to building an inclusive and accessible workplace where everyone feels valued and supported.\nIf you require reasonable accommodations during the recruitment process, please let us know or submit a request here.\nAre you a current ICON Employee? Please click here to apply","description_format":"text","description_chars":6445,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Clinical Trial Services (CRO)"],"lifecycle":[{"event":"open","at":"2026-10-25T11:34:47Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.148,"p_room":0.28,"age_days":52,"expected_fill_days":12,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/icon-ciam-engineer","json_url":"https://alion.io/job/icon-ciam-engineer.json","meta":{"generated_at":"2026-10-30T15:44:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3580,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5677},"rest":"https://alion.io/mcp/rest/get_company?id=5677"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ficon-ciam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ficon-ciam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ficon-ciam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/icon-ciam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ficon-ciam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3235899}},{"tool":"search_jobs","arguments":{"company":"iconplc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3235899},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}