CIAM Full Stack Engineer

About Manulife Manulife is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, we operate as Manulife across our offices in Canada, Asia, and Europe, and primarily as John Hancock in the United States. We have more than 40,000 employees, over 116,000 agents serving ~34 million customers worldwide, and over $1.3 trillion in assets under management and administration. Visit www.Manulife.com to find out more. For Manulife terms of use, please visit https://www.manulife.com/ca/en/about-us/social-media-policy

Manulife

M

manulife.com

10,001+ employees

Insurance

Toronto, Ontario

Public Company

419k LinkedIn followers

Raised $4.5B

• This role helps build and support secure, seamless Customer Identity & Access Management (CIAM) experiences across Manulife’s digital channels. You will develop customer-facing applications and services using React and Node.js, contributing to capabilities such as registration, authentication, multi-factor authentication (MFA), consent, profile management, and account recovery.
• Working within the CIAM team, you will turn customer and business needs into reliable software. You will apply modern identity standards and secure engineering practices while helping improve customer journeys and the operation of identity services.
• Develop, test, and maintain full-stack CIAM capabilities using React, Node.js, and related technologies.
• Build accessible, responsive customer experiences for registration, sign-in, MFA, consent, profile management, and account recovery.
• Develop and maintain APIs and backend services that support identity journeys and application integrations.
• Integrate digital applications with CIAM platforms using standards-based protocols such as OIDC/OAuth2, SAML, SCIM, and JWT.
• Implement authentication, authorization, token handling, session management, and logout flows following established security practices.
• Collaborate with product owners, designers, architects, and security teams to refine requirements and deliver maintainable solutions.
• Contribute to technical designs, API contracts, development standards, and reusable components.
• Apply secure coding practices and address vulnerabilities through code reviews, automated testing, and dependency updates.
• Build and maintain unit, integration, and end-to-end tests for applications, services, and identity journeys.
• Contribute to CI/CD pipelines and deployment configurations that support safe, repeatable releases.
• Help deploy and support cloud-based solutions, preferably on Azure.
• Use logs, metrics, traces, and alerts to troubleshoot issues and improve reliability.
• Participate in production support, incident response, root-cause analysis, and continuous improvement.
• Work with fraud and risk teams to support risk signals and adaptive authentication.
• Document technical designs, integration patterns, and operational procedures.
• Share knowledge and contribute to strong engineering practices across the team.

Required

• 3+ years of software engineering experience building or supporting production web applications.
• Hands-on experience with React and modern JavaScript or TypeScript.
• Experience building backend services or APIs with Node.js.
• Experience designing or integrating REST APIs and working with distributed systems.
• Understanding of identity and access management concepts, preferably including OIDC/OAuth2, SAML, and JWT.
• Familiarity with authentication, authorization, MFA, or other customer identity capabilities.
• Understanding of secure coding practices, code reviews, and automated testing.
• Experience with source control, build tools, testing frameworks, and CI/CD workflows.
• Experience deploying or supporting cloud-based applications; Azure experience is an asset.
• Strong troubleshooting, communication, and collaboration skills.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.

Preferred

• Experience with enterprise CIAM platforms such as IBM Security Verify, RSA, or comparable identity providers.
• Familiarity with WebAuthn/FIDO2, passkeys, adaptive authentication, device intelligence, identity proofing, or bot mitigation.
• Exposure to Azure services such as App Services, Functions, API Management, Key Vault, Azure Monitor, or Application Insights.
• Familiarity with containers, infrastructure as code, or cloud-native application design.
• Experience building accessible, internationalized, and responsive customer experiences.
• Exposure to observability tools such as Azure Monitor, Application Insights, Datadog, or Splunk.
• Financial services, insurance, or other regulated-industry experience.
• Experience working in Agile teams and with delivery tools such as Azure DevOps, Jira, or GitHub.
• Relevant cloud, software engineering, identity, or security certifications.
• The role being advertised is an existing vacancy.
• Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.
• Referenced Salary Location
• Boston, Massachusetts

• Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact hr@manulife.com for the salary range for your location.
• Manulife/John Hancock offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension/401(k) savings plans and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in the U.S. includes up to 11 paid holidays, 3 personal days, 150 hours of vacation, and 40 hours of sick time (or more where required by law) each year, and we offer the full range of statutory leaves of absence.
• We use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.