Back to results

Senior Access Management Engineer

  • London, ON, Canada

The anticipated annual base salary range for this position is $104,000 - $156,000. · Full-time

Applications open in a new tab.

Job details

Pay
The anticipated annual base salary range for this position is $104,000 - $156,000.
Job type
Full-time
Apply by
Posting language
English
Posted

Original job description

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we’re creating new opportunities for our customers, our business, and our people.

Join a team singularly focused on transforming the automotive industry. S&P Global Mobility is Mobility Global - the company behind CARFAX, automotiveMastermind, Market Scan, and Polk Automotive Solutions. Our strength comes from our people, and here, the progress you make helps the entire automotive ecosystem move faster and with greater confidence.

  • 10X Virginia Business Best Places to Work
  • 9X Washingtonian Great Places to Work
  • 10X Washington Post Top Workplace
  • 3X St. Louis Post-Dispatch Best Places to Work

What You’ll Do

  • Design, operate, and secure single sign-on and federation (SAML, OIDC, OAuth 2.0) across enterprise and SaaS applications.
  • Own MFA strategy and rollout, advancing toward phishing-resistant authentication (FIDO2/passkeys).
  • Design and tune risk-based conditional access and authorization policies that balance security and usability.
  • Manage workforce identity and, where applicable, customer identity (CIAM) authentication flows.
  • Lead secure onboarding of applications to the access platform with consistent policy and least-privilege defaults.
  • Define authentication assurance levels and authorization patterns, documenting and peer-reviewing policy changes.
  • Serve as a backup owner for an adjacent domain to eliminate single points of failure.
  • Ensure access outputs, including authentication logs, policy configurations, and access decisions, feed audit and resilience evidence.

Required Qualifications

What We’re Looking For

  • 6+ years in access management, identity, or authentication engineering.
  • Deep expertise with at least one access management platform (e.g., Okta, Microsoft Entra ID, Ping Identity, ForgeRock).
  • Federation and protocol mastery of SAML, OIDC, and OAuth 2.0.
  • MFA and conditional access design and operational experience, including modern phishing-resistant methods.
  • Policy design skill translating security requirements into authentication and authorization policy, with troubleshooting depth across authentication flows, tokens, and federation trust.

Preferred Qualifications

  • CIAM experience with customer identity and consumer-scale authentication.
  • Zero Trust architecture experience and device-trust integration.
  • Relevant certifications (vendor access-management, CISSP, or cloud security).
  • Scripting/automation to manage access policy as code.

This is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs.

Applicants must be legally authorized to work in Canada at the time of hire. The company is unable to provide immigration or work permit support for this position.

The anticipated annual base salary range for this position is $104,000 - $156,000. Actual compensation within this range will be determined based on a variety of factors, including geographic location, relevant experience, skills, qualifications, and internal equity considerations.

Mobility Global is committed to providing competitive compensation that reflects local market conditions and individual contributions. In addition to base salary, employees may be eligible for incentive compensation, long-term incentives, and a comprehensive benefits package, where applicable.

What’s In It For You

  • Competitive compensation package, including base salary and incentive opportunities where applicable.
  • Comprehensive health and wellness benefits for employees and eligible dependents.
  • Retirement savings programs, including company matching contributions where available.
  • For more information on benefits, please visit us at https://mobilityglobalbenefits.com/ourbenefits

Equal Opportunity Employer

Mobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.

Recruitment Fraud Alert

Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.
More about this job

Responsibilities

Design, operate, and secure enterprise and SaaS authentication, federation, MFA, and conditional access, while leading application onboarding and defining least-privilege authentication and authorization policies. Maintain policy documentation and audit evidence, troubleshoot authentication flows, and provide backup ownership for an adjacent domain.

Requirements

Requires at least six years of access management, identity, or authentication engineering experience, deep expertise with an access management platform, and mastery of SAML, OIDC, and OAuth 2.0. Candidates should have operational experience designing MFA and conditional access, including phishing-resistant methods, and be able to translate security requirements into policies and troubleshoot authentication flows, tokens, and federation trust.

Skills

  • Access Management
  • Identity and Authentication Engineering
  • Single Sign-On
  • SAML
  • OpenID Connect
  • OAuth 2.0
  • Multi-Factor Authentication
  • FIDO2 and Passkeys
  • Conditional Access
  • Authorization Policy Design
  • Okta
  • Microsoft Entra ID
  • Ping Identity
  • ForgeRock
  • Customer Identity and Access Management
  • Access Policy Automation

Benefits

  • Incentive Compensation
  • Long-Term Incentives
  • Health and Wellness Benefits
  • Retirement Savings Program
  • Company Matching Contributions

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Security & Safety
  • Engineering

Keywords

  • Access Management
  • Identity Engineering
  • Authentication
  • Single Sign-On
  • SAML
  • OIDC
  • OAuth 2.0
  • Okta
  • Microsoft Entra ID
  • Ping Identity
  • ForgeRock
  • Multi-Factor Authentication
  • FIDO2
  • Passkeys
  • Conditional Access
  • Risk-Based Policies
  • Authorization
  • Least Privilege
  • Workforce Identity
  • Customer Identity and Access Management
  • Zero Trust
  • Device Trust
  • Policy as Code
  • Authentication Assurance Levels
  • Federation Trust
  • Audit Evidence
  • Authentication Logs
  • SaaS Applications
  • Automotive Intelligence

Report this job