Senior Security Engineer - Identity and Access Management

Accountabilities: Develop and implement robust IAM strategies aligned with cloud-native security principles, zero-trust architecture, and least-privilege access. Build and mature capabilities across Identity Governance and Administration (IGA), Privileged Access Management (PAM), SSO, MFA, access management, secrets management, and certificate lifecycle management. Design and maintain IAM integrations across AWS services, SaaS platforms, third-party identity solutions, and developer or DevOps environments. Automate identity provisioning, de-provisioning, access reviews, and related IAM operations using scripting, infrastructure-as-code, and AI-enabled tools. Establish secure access controls for cloud-native workloads and AI/ML systems, including training data, models, and inference APIs. Integrate IAM controls into CI/CD pipelines, secrets management processes, and broader engineering workflows. Partner with Security, DevOps, Infrastructure, and other cross-functional teams to embed secure identity practices across the technology lifecycle. Mentor junior engineers and provide technical leadership on IAM initiatives, architecture, and implementation decisions. Monitor emerging identity and cloud security threats, compliance requirements, and industry practices to continuously improve the IAM strategy. Requirements 8+ years of relevant professional experience with a Bachelor's degree, 5+ years with a Master's degree, 3+ years with a PhD, or an equivalent combination of education and experience. Strong hands-on experience with IAM platforms such as Okta, CyberArk, Ping, or SailPoint. Deep knowledge of IAM in cloud-native environments, particularly AWS IAM, roles, policies, permissions boundaries, federation, and access controls. Strong proficiency with infrastructure-as-code technologies such as Terraform or CloudFormation. Practical knowledge of authentication and authorization protocols including SAML, OAuth 2.0, OpenID Connect, and Kerberos. Experience with directory services such as Active Directory and LDAP, as well as modern cloud-based alternatives. Strong scripting and automation capabilities using technologies such as Python or PowerShell. Experience integrating IAM into CI/CD pipelines, DevOps workflows, secrets management, and cloud environments. Solid understanding of security and compliance frameworks such as NIST, SOC 2, and PCI DSS. Strong communication, collaboration, and influencing skills, with the ability to lead cross-functional initiatives and communicate complex security concepts effectively. Ability to mentor others, work independently, make sound technical decisions, and balance security requirements with business and engineering needs. Relevant certifications such as CISSP, CISM, CIAM/CAMS, CyberArk, or Okta credentials are considered an asset. Experience with AWS services such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, CodePipeline, and AWS developer tooling is a plus. Benefits Competitive base salary of CAD $136,800–$171,000 , calibrated according to location, skills, experience, and other job-related factors. Annual bonus opportunities based on individual performance and overall organizational results. Multiple health insurance options. Flexible vacation time plus additional floating holidays. Retirement savings program with company contributions. Equity participation in a publicly traded organization. Monthly stipend to support remote work. Annual professional development stipend to support learning and career growth. Family-forming benefits and generous parental leave, including base salary top-up. Flexible-first remote work environment available across Canada, with this role specifically supporting employees in Ontario or British Columbia. Inclusive workplace committed to equal opportunity, belonging, and diverse perspectives.