Software Quality Engineer: Customer Identity and Access Management (CIAM)

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

The Software Quality Engineer is responsible for quality engineering and assurance across Customer Identity and Access Management (CIAM) platforms, customer-facing identity journeys, identity APIs, authentication services and related security controls. This person will work with development, business, architecture, cyber security and platform leads to define and drive effective testing approaches that ensure CIAM capabilities are secure, resilient, performant and fit for customer-facing use.

The ideal candidate will have strong experience in technical testing across backend, frontend and API layers, with specific exposure to IAM or CIAM platforms. The role requires the ability to build and maintain test automation frameworks, validate identity protocols and customer authentication journeys, and help the team deliver secure, high-quality identity services.

Group Technology & Transformation | Identity and Access Management (IAM)

• Lead quality assurance initiatives and test frameworks for CIAM platforms, customer identity journeys and identity-related integrations.

• Work with product, business, architecture, security and engineering leads to ensure CIAM business and technical requirements are testable, measurable and aligned to security and customer experience outcomes.

• Monitor quality delivery across the CIAM team, identify control or testing gaps, and drive continuous improvement in release quality and production stability.

• Mentor engineers in IAM-aware testing practices, including authentication, authorisation, token, session and customer journey validation.

• Innovate in CIAM testing strategies, including automation, performance, resilience, security, API and identity protocol testing.

• Engage with stakeholders to ensure quality throughout the SDLC, with a strong focus on customer registration, login, MFA, password reset, account recovery, profile management, consent and session management journeys.

• Help develop CI/CD pipeline configurations and DevOps practices that support automated regression, security, performance and deployment testing for CIAM services.

• Validate OAuth 2.0, OpenID Connect and SAML flows, including client configuration, redirect URI handling, scopes, claims, token lifetimes, refresh token behaviour and logout/session termination.

• Perform identity-focused negative and abuse-case testing, including account enumeration, credential stuffing, brute-force resistance, token replay, claims manipulation, authorisation bypass and insecure password reset scenarios.

Requirements: Skills and Experience Required

Technical Skills:

• Expertise in programming languages like Java, C#, Python or JavaScript.

• Experience in creating test automation frameworks at both a frontend and backend layer.

• Strong expertise in SQL and test data management

• Strong understanding of IAM and CIAM fundamentals, including:

  • Authentication and authorisation protocols, including OAuth 2.0, OpenID Connect, SAML and JWT.

  • Customer identity lifecycle concepts, including registration, onboarding, profile management, account recovery, consent, preference management and deactivation.

  • Access governance, authorisation models, delegated access, RBAC, ABAC and policy enforcement principles.

  • Token structures, claims validation, session handling, token expiry, refresh token behaviour and logout/session termination.

  • CIAM capabilities such as MFA, step-up authentication, adaptive authentication, customer verification, KYC, fraud/risk signals and channel integration across web, mobile, IVR, API and messaging channels.

• Familiarity with performance testing tools such as Apache JMeter or k6, with the ability to analyse CIAM performance under high-volume customer authentication and API transaction loads.

• Proficiency in security testing tools such as OWASP ZAP or Burp Suite, with the ability to test identity-specific risks including broken authentication, weak session management, token replay, account enumeration and authorisation bypass.

• Experience with CIAM platforms or related technologies such as PingFederate, PingAccess, PingOne, Microsoft Entra External ID, Azure AD B2C, ForgeRock, Okta/Auth0, API gateways, KYC services, fraud engines or customer verification services.

• Extensive experience in CI/CD pipelines using Jenkins, GitLab CI, ADO, or similar.

• In-depth understanding of DevOps practices and tools, including containerisation and orchestration with tools like Docker and Kubernetes.

• Experience in working with cloud technologies like AWS, Azure or Google Cloud.

Qualification/s and Experience:

• Matric

• Relevant tertiary qualification or equivalent

• 5+ years in software testing, with experience in automation, API testing, performance testing, security testing and DevSecOps practices.

• Demonstrated experience testing IAM or CIAM systems, customer identity workflows, authentication journeys, identity APIs, federation patterns and authorisation controls in enterprise environments.

• Experience validating customer-facing identity journeys such as registration, login, MFA, password reset, account recovery, consent, profile management and session management.

• Experience working in regulated environments where privacy, auditability, customer data protection and secure handling of personally identifiable information are important quality considerations.

 

Personal and Interpersonal Skills

• Communication: Effective communication with cross-functional teams, including engineering, architecture, cyber security, operations, product and business stakeholders.

• Relationship Building: Establish and maintain strong relationships across IAM, digital channels, application teams, platform teams and external vendors.

• Analytical Thinking: Ability to assess complex identity journeys, identify quality or control gaps, and translate findings into practical remediation actions.

• Assertiveness: Ability to surface issues, challenge weak controls and pursue difficult conversations without delay

 

Skills

Action Planning, Adaptive Thinking, Data Compilation, Data Management, Evaluating Information, Executing Plans, Legal Practices, Oral Communications, Policies & Procedures, Project Quality Management, Project Testing, Report Review, Test Case Management

Competencies

Business Insight

Communicates Effectively

Courage

Cultivates Innovation

Drives Results

Ensures Accountability

Instills Trust

Manages Complexity

Education

NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent

Closing Date

13 August 2026 , 23:59

The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

The Old Mutual Story!