Overview

CIAM (Customer Identity and Access Management) Specialist Jobs in Casablanca-Settat, Morocco at Stellantis

Title: CIAM (Customer Identity and Access Management) Specialist

Company: Stellantis

Location: Casablanca-Settat, Morocco

Job Summary

We are looking for a Customer Identity and Access Management leader who will report directly to the Head of IAM and will be responsible for overseeing the strategy, implementation, and governance of CIAM solutions. You will be the main point of contact for all CIAM design and architecture matters, and you will ensure secure and seamless customer authentication, authorization, and identity management.

The Customer Identity and Access Management (CIAM) Specialist is a pivotal leadership role, reporting directly to the Head of Identity and Access Management (IAM). This position is tasked with overseeing the strategic direction, execution, and governance of CIAM solutions within the organisation. As the principal authority on CIAM design and architecture, the Specialist acts as the primary contact for all matters related to customer identity management frameworks.

Responsibilities

  • Contribute to the CIAM roadmap: onboarding journeys, authentication methods, progressive profiling, consent, and account recovery.
  • Align CIAM capabilities with business goals while enforcing security and compliance.
  • Define KPIs and success metrics (login success rate, drop-off rate, fraud rate, MFA adoption, recovery success).
  • Design and manage the end-to-end lifecycle for customer identities: registration / sign-up (self-service), account verification and activation, profile management & progressive profiling, account linking/merge (multiple identities), deactivation, deletion, retention handling
  • Implement and optimize authentication experiences: password-less, MFA, step-up authentication, adaptive/risk-based authentication (device/location/behaviour signals), social login, and federations (Apple/Google, enterprise federation for B2B)
  • Configure authorization patterns: customer roles/segments and entitlements, API access policies for channels (mobile, web, partner portals)
  • Integrate applications and APIs using CIAM standards: OIDC/OAuth2, SAML (where needed), SCIM (if provisioning is in scope)
  • Support secure API access (tokens, scopes, audiences, and refresh strategies).
  • Partner with engineering teams to embed CIAM into apps (SDK integration, login widgets, token validation, session management).
  • Implement consent capture and enforcement (marketing consent, terms acceptance, cookie/analytics preferences when in scope).
  • Support privacy requirements
  • Ensure auditable traceability for key events (consent changes, authentication events, account changes).
  • Implement controls against CIAM threats (credential stuffing, brute force, bot attacks, account takeover (ATO), suspicious login patterns…)
  • Configure protections: throttling/rate limiting, bot detection, CAPTCHA strategies, anomaly detection, step-up authentication, lockout policies
  • Monitor CIAM service health and authentication flows: login latency, error rates, token failures, integration issues
  • Build operational readiness: runbooks, support procedures, escalation paths, SLAs/SLOs and incident management practices
  • Coordinate release management and change impacts with app teams and service desk.
  • Produce and maintain documentation: CIAM policies (password/MFA/session), architecture/integration patterns, onboarding guides for application teams
  • Expected deliverables (non-exhaustive list):
  • CIAM architecture patterns (SSO, multi-brand, B2B federation)
  • Authentication and recovery journey designs
  • Configuration of policies (MFA, session, adaptive auth)
  • Integration specs for apps/APIs (OIDC flows, token claims, scopes)
  • Consent and privacy implementation documentation
  • Dashboards/metrics and operational runbooks

Qualifications

  • A bachelor's degree or higher in computer science, information security, or a related field.
  • Strong knowledge of Identity concepts: customer identity lifecycle, self-registration / sign-up verification & activation, profile management & progressive profiling, account recovery (password reset, account unlock) deactivation, deletion, retention,
  • Strong knowledge of password-based authentication (policies, hashing concepts), MFA (SMS, email, TOTP, push, FIDO2/passkeys), Password-less authentication patterns, Step-up / adaptive authentication
  • Session management concepts: token lifetime, refresh strategies, idle vs absolute timeout, remember me vs risk-based re-auth
  • A CIAM specialist must be fluent in modern identity standards.
  • Identity & API Standards: OAuth 2.0 (flows, scopes, tokens, refresh tokens), OpenID Connect (OIDC), SAML 2.0, SCIM (nice-to-have)
  • API & Integration Knowledge: REST APIs and JSON, Token validation and introspection, Secure API access patterns, Understanding of mobile vs web authentication flows
  • Hands-on experience with at least one CIAM platform is required (vendor agnostic)
  • Platform configuration capabilities: Policy configuration (auth, MFA, session, risk), Federation setup (social, partner, enterprise), Login and registration journey customization, Identity data schema and attribute mapping, multi-tenant / multi-brand configuration
  • Security & Fraud Prevention Skills: Threat Awareness, credential stuffing, brute force attacks, account takeover, Bot traffic and fake account creation, security controls, CAPTCHA and bot detection strategies, anomaly detection and step-up auth Lockout, recovery, and abuse handling, secure recovery flows (email/SMS risk awareness), …
  • Privacy, Consent & Regulatory Skills
  • Operational & Delivery Skills
  • Proven ability to write functional requirements, user stories, acceptance criteria, process documentation

Soft skills (high impact)

  • Strong stakeholder management and facilitation (workshops, conflict resolution).
  • Effective communication (technical → non-technical)
  • Highly motivated, self-driven, and adaptable, and the ability to work under pressure and in a fast-paced environment.
  • Structured thinking, ability to simplify complexity
  • Analytical mindset, attention to detail, strong documentation habits
  • Pragmatic and delivery-oriented
  • Comfortable working in multi-cultural, cross-functional environments
  • Ability to balance security risks, legal constraints, and customer experience

At Stellantis, we assess candidates based on qualifications, merit and business needs. We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation and disability. Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.

Apply

Upload your CV/resume or any other relevant file. Max. file size: 800 MB.