The IAM Engineer – Customer Identity and Access Management (CIAM) is responsible for the hands-on design, development, automation and operational support of TAL’s customer identity services built on Okta. The role applies SecDevOps practices, including coding, automation, CI/CD and infrastructure as code, to deliver reliable and seamless identity capabilities across digital platforms, cloud environments and third-party services. Working closely with the IAM Engineering Lead, the role identifies control gaps, develops automated solutions and drives continuous improvement to ensure customer identity services remain secure, sustainable and aligned with business, customer experience and regulatory requirements.In this role you will:Build and support CIAM services: Design, configure and support TAL’s Customer Identity and Access Management capabilities, including Okta, across customer registration, authentication, account recovery and identity lifecycle journeys.Engineer secure identity solutions: Develop and maintain secure application, API and partner integrations, applying authentication, authorisation, federation and Zero Trust principles.Drive automation and engineering excellence: Build automation, CI/CD pipelines and infrastructure as code using tools such as Terraform to improve efficiency, consistency and reliability.Strengthen identity security and controls: Assess and improve customer identity controls to protect customer information, reduce fraud and account takeover risk, and address control deficiencies and audit findings.Optimise and continuously improve CIAM: Diagnose complex technical issues, enhance Okta security capabilities and work across Security, Risk, Digital and Technology teams to improve the security, reliability and customer experience of CIAM services.
