TRACK A · Identity Platform & CIAM Engineering
Design, build, integrate, operate, and secure modern identity and authentication platforms.
Target roles
- Identity Platform Engineer
- CIAM Engineer
- Authentication Engineer
- Identity Software Engineer
- Identity Infrastructure Engineer
Core domains
- D01 — Identity Fundamentals
- D02 — Authentication
- D03 — Authorization & Access Control
- D04 — Identity Protocols & Cryptography
- D05 — Identity Platform & CIAM
- D09 — Non-Human Identity (NHI)
- D10 — Cloud & Workload Identity
- D11 — Identity Security & Zero Trust
Supporting domains
- D06 — Workforce & Directory Identity
- D07 — Identity Governance & Administration (IGA)
- D08 — Privileged Access Management (PAM)
- D12 — Emerging Identity Technologies
Career objective
Design, build, integrate, operate, and secure modern identity and authentication platforms.
Suggested practice sequence
The following A/B outcome codes are optional learning scaffolds retained from v0.3. Framework v0.4 defines this track through target roles and core/supporting domains, rather than these outcome codes.
A01 · Authentication & Federation Engineering
OAuth 2.0, OIDC, SAML, SSO, MFA, Passkeys, WebAuthn
A02 · CIAM Lifecycle Engineering
Registration, identity proofing, recovery, account linking, lifecycle
A03 · Token & Session Security
JWT, token validation, refresh, revocation, session management
A04 · Authorization Engineering
RBAC, ABAC, policy engines, API authorization
A05 · Identity Platform Architecture
IdPs, distributed systems, availability, scalability, resilience, monitoring
A06 · Platform Security & Operations
Threat modeling, authentication security, troubleshooting, incident analysis
Portfolio evidence
Use a technical explanation, implementation, architecture decision, security analysis or research artifact to demonstrate your competence. Connect each artifact to a question and its domains.