Senior Security Engineer - Identity and Access Management

What you'll do

• Build and operate IAM capabilities including IGA, PAM, SSO, MFA, secrets management, and certificate lifecycle management.
• Automate identity provisioning and access reviews, and integrate IAM across AWS, SaaS platforms, and DevOps pipelines.
• Lead IAM projects, promote least privilege and zero trust, and collaborate with and mentor engineering teams.

What they ask for

• 8 years related experience with a Bachelor’s degree; or 5 years with a Master’s degree; or a PhD with 3 years’ experience; or equivalent combination of related education and work experience.
• Experience with IAM tools and deep knowledge of cloud-native IAM, especially AWS IAM, roles, policies, permissions boundaries, and federation.
• Proficiency in infrastructure-as-code; familiarity with authentication and authorization protocols and directory services; scripting skills for IAM automation.
• Understanding of compliance standards and experience integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.

Nice to have

• CISSP, CISM, or IAM-specific certifications such as CIAM/CAMS, CyberArk Certified, or Okta Certified Consultant.
• Experience with AWS technologies and DevOps tools and practices, including secrets management and CICD pipelines.

Pay

CAD 136,800 - 171,000 base salary

Tools

AWS, Okta, CyberArk, Ping, SailPoint, Terraform, CloudFormation, Python

AI focus

Design identity and access controls for AI/ML systems, securing access to training data, models, and inference APIs; automate IAM operations using AI tools.