Customer Identity & Access Management Technical Advisor

IHG•Atlanta, GA

30d•Hybrid

About The Position

IHG is seeking an experienced CIAM (Customer Identity & Access Management) Technical Advisor to play a key role in securing guest identity and preventing fraud within the CIAM landscape. This role focuses on advising strategy, security, and implementation of CIAM solutions, ensuring compliance with industry standards, and enhancing fraud detection and prevention capabilities. The ideal candidate will have expertise in SAP CDC (Gigya), modern authentication protocols, fraud management such as Forter, and risk-based authentication. Your Day to Day: Collaborate with cross-functional teams (security, architecture, engineering, fraud, compliance) to develop CIAM roadmaps and deliver secure, scalable identity solutions. Provide technical advisory and hands-on implementation for CIAM strategy, fraud prevention, and risk-based authentication. Work across multiple business and technical partner relationships to implement security best practices, industry regulations (GDPR, CCPA), and business objectives. Design, architect and implement the modernization of access management for our guests, partners, and API solutions, with particular focus on user experience. Drive the adoption of modern authentication mechanisms (OAuth 2.0, OpenID Connect, FIDO2, WebAuthn) to improve security and user experience. Develop custom scripts and integration connectors to support identity workflows and data synchronization between CIAM platforms and downstream applications. Design, architect and implement anti-fraud technologies across multiple areas including credit card and account registration. Work to improve the resiliency and scalability of our platform ecosystem with support partners. Support Decentralized Identity (DID) and self-sovereign identity initiatives for improved user control and compliance.

Requirements

8+ years in IAM, CIAM, or security roles with a focus on fraud prevention.
Deep knowledge of OAuth, OIDC, SAML, and identity-proofing mechanisms.
Strong background in fraud detection, bot mitigation, and risk-based authentication.
Understanding of cryptographic principles, token security, and identity governance frameworks.
Demonstrated ability to align CIAM security with business needs and compliance requirements.

Nice To Haves

Experience with SAP CDC (Gigya) is preferred, CIAM platforms like Okta, Ping, Auth0, or ForgeRock are considered.

Responsibilities

Collaborate with cross-functional teams (security, architecture, engineering, fraud, compliance) to develop CIAM roadmaps and deliver secure, scalable identity solutions.
Provide technical advisory and hands-on implementation for CIAM strategy, fraud prevention, and risk-based authentication.
Work across multiple business and technical partner relationships to implement security best practices, industry regulations (GDPR, CCPA), and business objectives.
Design, architect and implement the modernization of access management for our guests, partners, and API solutions, with particular focus on user experience.
Drive the adoption of modern authentication mechanisms (OAuth 2.0, OpenID Connect, FIDO2, WebAuthn) to improve security and user experience.
Develop custom scripts and integration connectors to support identity workflows and data synchronization between CIAM platforms and downstream applications.
Design, architect and implement anti-fraud technologies across multiple areas including credit card and account registration.
Work to improve the resiliency and scalability of our platform ecosystem with support partners.
Support Decentralized Identity (DID) and self-sovereign identity initiatives for improved user control and compliance.