Customer Identity Solutions Architect

Shape the future of secure customer identity and digital trust for leading financial services organizations. The Role We are seeking a Customer Identity Solutions Architect with deep Customer Identity and Access Management (CIAM) expertise to lead the design and delivery of large-scale digital identity transformation initiatives. You will play a critical role in assessing current-state customer identity capabilities, defining target-state architecture for MVP and future-state solutions, and helping clients build secure, scalable, and frictionless customer identity experiences across enterprise environments. Working closely with business, security, and technology stakeholders, you will provide strategic architecture leadership while guiding the successful delivery of modern customer identity solutions within complex transformation programmes across financial services. This role can be full-time or independent contractor and requires 4 days per week onsite in downtown Toronto. What You'll Do Lead customer identity capability assessments and develop strategic recommendations to modernize enterprise CIAM ecosystems. Define target-state architecture, solution blueprints, and capability roadmaps for MVP and future-state customer identity platforms. Design and advise on secure customer identity solutions including registration and onboarding, authentication, MFA, step-up authentication, identity proofing, account recovery, consent management, and fraud prevention. Partner with client stakeholders, security teams, and delivery squads to ensure customer identity solutions align with business objectives, security requirements, and regulatory expectations. Provide architecture leadership across modern identity technologies including Ping Identity, Okta, ForgeRock, identity graph, identity fabric, behavioural analytics, device intelligence, and fraud detection platforms. What We're Looking For 10+ years' experience delivering Customer Identity and Access Management (CIAM) architecture or digital identity transformation programmes within complex enterprise environments. Deep expertise designing enterprise customer identity solutions using platforms such as Ping Identity, Okta, or ForgeRock. Strong understanding of modern identity standards including OAuth 2.0, OpenID Connect (OIDC), SAML, FIDO2, and passwordless authentication approaches. Experience designing secure customer journeys across registration, authentication, identity verification, consent management, fraud prevention, and customer lifecycle management. Excellent stakeholder management and communication skills with the ability to translate complex technical architecture into clear business outcomes. Bonus Points For Experience delivering customer identity transformation within financial services or other highly regulated industries. Knowledge of Zero Trust security principles and modern digital identity architectures. Experience with cloud-native identity platforms and SaaS CIAM solutions. Exposure to fraud prevention, digital trust, customer identity analytics, or customer data platforms. Previous consulting or client-facing architecture experience leading enterprise transformation programmes. Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions Work in a collaborative, flat, and entrepreneurial consulting culture Access continuous learning, training, and industry certifications Be part of a team shaping the future of digital financial services Help shape the future of digital transformation across FS & Energy Benefits Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution Virtual Health Care – Company-paid program available to all employees and their dependents/partners Employee & Family Assistance Program (EFAP) – Company-paid support ser…