Identity and Access Management (IAM) Engineer

Job Title: Senior IAM Systems Engineer - Advanced

Location: Toronto, ON

Work Environment : Hybrid 3 days in office, 2 days remote

Contract Duration (in Months): 12 months (Highly chance to extends)

Daily Responsibilities: Describe a typical ‘day in the life’ :

• Lead the full lifecycle of authentication-service implementations, from business and project handoff through installation, configuration, development, testing, deployment, and production support.
• Serve as a subject matter expert on RSA SecurID, RSA Authentication Manager, and RSA Cloud Authentication Service, including their architecture, tools, and integrations.
• Provide technical guidance on performance, scalability, reliability, security, and operational readiness.
• Participate in architecture, design, and technology discussions for new solutions and enhancements.
• Configure, customize, integrate, and troubleshoot RSA authentication platforms across enterprise environments.
• Identify opportunities to improve efficiency through automation, standardization, and engineering best practices.
• Lead the full lifecycle of authentication-service implementations, from business and project handoff through installation, configuration, development, testing, deployment, and production support.
• Serve as a subject matter expert on RSA SecurID, RSA Authentication Manager, and RSA Cloud Authentication Service, including their architecture, tools, and integrations.
• Provide technical guidance on performance, scalability, reliability, security, and operational readiness.
• Participate in architecture, design, and technology discussions for new solutions and enhancements.
• Configure, customize, integrate, and troubleshoot RSA authentication platforms across enterprise environments.
• Identify opportunities to improve efficiency through automation, standardization, and engineering best practices.
• Establish strong working relationships across business units, technology teams, and platform groups.
• Collaborate with stakeholders to define deliverables and ensure IAM initiatives are effectively integrated into procedures, standards, and processes.
• Support incident resolution, root-cause analysis, risk remediation, and continuous improvement of authentication services.
• Contribute to technical documentation, implementation standards, and operational procedures.

What program/technology/software knowledge is essential for this role :

• Experience with authentication and federation technologies, including:
• SAML
• OAuth 2.0
• OpenID Connect
• Multi-factor authentication
• Single sign-on
• Working knowledge of several of the following:
• Microsoft Active Directory
• Microsoft Entra ID / Azure AD
• WS-Federation and WS-Trust
• XML and SOAP
• Kerberos
• Linux/UNIX
• TLS
• Group Policy Objects

Must-have Skills/Experiences:

• 3–5 years of hands-on IAM or authentication engineering experience.
• Strong experience installing, configuring, integrating, developing, and supporting RSA Authentication Manager and RSA Cloud Authentication Service.
• Knowledge of network security, authentication, authorization, and identity lifecycle concepts.
• Experience deploying enterprise software and troubleshooting complex technical issues across Windows and UNIX/Linux platforms.
• Strong analytical, problem-solving, communication, and collaboration skills.
• Ability to manage multiple priorities and work effectively across technical and business teams.

Nice-to-have Skills/Experience and/or Education, certifications, qualifications, designations:

• Experience designing, developing, and tuning highly scalable authentication or security systems.
• Experience with cloud security, identity security, or modern authentication architectures.
• Knowledge of privileged access management, authorization engines, or policy-based access control.
• Experience with automation, scripting, infrastructure as code, or DevOps practices.
• Strategic thinking and the ability to influence decisions across functions and business areas.
• Relevant security or IAM certifications, such as CISSP, CISM, or vendor-specific RSA certifications.

Mindlance is an equal-opportunity employer. We are committed to inclusive, equitable, barrier-free recruitment and selection processes, and a work environment in accordance with the Accessibility for Ontarians with Disabilities Act (AODA). We will be happy to work with applicants requesting accommodation at any stage of the hiring process. We use AI in our Hiring processes