Back to results

Lead Engineer

  • Toronto, ON, M1K 5L1, Canada

Applications open in a new tab.

Job details

Posting language
English
Posted

Original job description

Requisition ID: 265726

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Contributes to the overall success of the Enterprise Customer Identity & Access Management (CIAM) Engineering function by ensuring that engineering initiatives, delivery plans, and strategic goals are executed effectively. The role ensures compliance with regulatory and internal policy requirements while championing customer‑focused engineering and reliable identity services across the enterprise.

Is this role right for you? In this role you will:

  • Drive the hands‑on engineering, configuration, and integration of CIAM solutions that support enterprise security strategies, reliability standards, and digital identity modernization goals.
  • Implement, maintain, and continuously improve CIAM capabilities and supporting services.
  • Design and implement CIAM frameworks aligned with organizational security standards and regulatory requirements.
  • Develop and apply best practices for identity federation, SSO, MFA, OAuth2/OIDC flows, and adaptive authentication.
  • Ensure CIAM engineering work meets regulatory, compliance, and security requirements across channels and geographies.
  • Support onboarding, integration, and expansion of digital channels into CIAM platforms, ensuring stable and secure implementations.
  • Perform risk assessments and technical security reviews for CIAM integrations and recommend mitigation strategies.
  • Continuously refine and enhance deployment processes, onboarding workflows, and implementation guidelines.
  • Collaborate closely with internal engineering, product, security, and operations teams to ensure smooth and efficient adoption of CIAM services.
  • Provide expertise, guidance, and documentation to engineering teams and partner groups to support optimal use of CIAM platforms.
  • Create and maintain technical documentation, including architecture diagrams, configuration guides, troubleshooting guides, and operational procedures.
  • Establish effective working relationships across multiple technology and business partners, project teams, and stakeholders.
  • Understands how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
  • Champion a customer‑focused engineering mindset and contribute to a collaborative and inclusive work environment.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

  • 7+ years of hands-on experience on microservice implementation using Java/J2EE, Spring framework, Gradle, NodeJS, Restful APIs, Cloud SQL, and Kafka.
  • 5+ years of hands‑on experience with major CIAM platforms, specifically ForgeRock (AM, IDM, DS), Ping (PingFederate, PingAccess, PingDirectory), with exposure to Okta an asset.
  • 5 years of experience in automating deployment processes and working with CI/CD tools (Jenkins, Google Cloud Deployment, etc.)
  • Strong understanding of authentication and authorization protocols such as OAuth2, OpenID Connect, SAML, LDAP.
  • Proven ability to design and implement IAM solutions for enterprise and cloud environments (AWS, Azure, GCP).
  • Experience with identity federation, SSO, MFA, and adaptive authentication strategies.
  • Proficiency in DevOps tools (Terraform, CI/CD pipelines) for IAM deployment and automation.
  • Solid knowledge of cybersecurity principles, risk management, and compliance frameworks.
  • Excellent problem-solving and troubleshooting skills for complex IAM integrations. Strong work ethic and reliability
  • Excellent communication and time management skills
  • Experience delivering training using virtual conferencing
  • Ability to develop technical documentation, including architecture diagrams, configuration guides, and operational procedures.
  • Ability to prepare communications, briefings, and technical summaries for senior stakeholders when required.
  • Proven success working within a matrix organization and collaborating across cross‑functional teams.
  • Strong prioritizing, planning, analytical, presentation, project/change management, and relationship building skills

What's in it for you?

  • Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
  • Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.  
  • Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
  • Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
  • Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s):  Canada : Ontario : Toronto 

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.  

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our  Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.

More about this job

Responsibilities

Lead the engineering, configuration, and integration of Customer Identity & Access Management (CIAM) solutions to support enterprise security and digital identity modernization. Collaborate with cross-functional teams to design secure frameworks and maintain technical documentation for identity services.

Requirements

Requires over 7 years of experience in microservices with Java/Spring and at least 5 years of hands-on experience with CIAM platforms like ForgeRock or Ping. Must possess deep knowledge of authentication protocols (OAuth2, OIDC, SAML) and DevOps tools for cloud environments.

Skills

  • Java/J2EE
  • Spring Framework
  • NodeJS
  • Restful APIs
  • Kafka
  • ForgeRock
  • PingFederate
  • PingAccess
  • PingDirectory
  • Okta
  • OAuth2
  • OpenID Connect
  • SAML
  • Terraform
  • CI/CD
  • Cloud SQL

Benefits

  • Upskilling Through Online Courses
  • Cross-functional Development Opportunities
  • Tuition Assistance
  • Bonus
  • Flexible Vacation
  • Personal Days
  • Sick Days
  • Health Benefits

Visa sponsorship

Not detected in the job text

Categories

  • Security & Safety
  • Software
  • Engineering
  • Technology
  • Finance & Accounting

Keywords

  • CIAM
  • Identity & Access Management
  • Microservices
  • Java
  • Spring
  • Gradle
  • NodeJS
  • Restful APIs
  • Cloud SQL
  • Kafka
  • ForgeRock
  • Ping Identity
  • Okta
  • OAuth2
  • OIDC
  • SAML
  • LDAP
  • AWS
  • Azure
  • GCP
  • Terraform
  • Jenkins
  • Google Cloud Deployment
  • Cybersecurity
  • Risk Management
  • Compliance
  • SSO
  • MFA
  • Adaptive Authentication
  • Identity Federation

Report this job