Identity & Access Management (IAM) Engineer

Position: IAM Engineer

Location: Onsite- Toronto, ON

Job type: Full-Time/Permanent Hiring

Job Description

• We are seeking an Identity & Access Management (IAM) Engineer with strong experience designing, implementing, and supporting enterprise IAM solutions.
• The ideal candidate will have hands-on expertise with Azure AD (Entra ID), Okta, Ping Identity, Sail
• Point, Forge
• Rock, or Cyber
• Ark, along with experience in SSO, MFA, Identity Federation, PAM, and cloud IAM across enterprise environments.

Key Responsibilities

• Design, implement, and support enterprise Identity & Access Management (IAM) solutions, ensuring secure authentication, authorization, and access governance.
• Configure and manage SSO, MFA, Identity Federation (SAML, OAuth 2.0, OpenID Connect) and Privileged Access Management (PAM) solutions across enterprise applications.
• Integrate IAM platforms with Active Directory, LDAP, cloud services (Azure, AWS, GCP), and enterprise applications, ensuring secure identity lifecycle management.
• Implement access governance, RBAC, ABAC, least privilege, provisioning/de-provisioning, and directory synchronization following security best practices.
• Collaborate with security, infrastructure, and application teams to support IAM integrations, troubleshoot authentication issues, and strengthen enterprise security posture.
• Support IAM operations, audits, compliance initiatives, and continuous improvements across large-scale enterprise environments.

Required Skills (Must Have)

• Identity & Access Management (IAM)
• Azure AD / Microsoft Entra ID
• Okta / Ping Identity / SailPoint / ForgeRock / CyberArk (any combination)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Identity Federation
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• Privileged Access Management (PAM)
• Active Directory (AD)
• LDAP
• RBAC / ABAC
• Access Governance
• Azure / AWS / GCP IAM