Identity & Access Management (IAM) Engineer – Permanent
Location: Richmond, BC – Hybrid
Salary: $96,929–$117,554 + Pension & Benefits
Employment: Full-Time, Permanent
Schedule: 36.25 hours/week
Onsite Requirements:
- First 30 days: 5 days onsite for onboarding.
- After 30 days: 3 days onsite (Wednesday–Friday).
About the Role
We are looking for a hands-on IAM Engineer to join a growing Cybersecurity team. You will design, implement and support modern identity and access management solutions, with a focus on CIAM, IGA and secure authentication.
Key Responsibilities
- Design and implement IAM, CIAM and IGA solutions.
- Configure SSO integrations using SAML, OIDC and OAuth 2.0.
- Support identity lifecycle management, provisioning and deprovisioning.
- Implement RBAC, birthright provisioning and SCIM integrations.
- Support privileged access management and identity governance initiatives.
Required Skills
- 4+ years of hands-on IAM experience.
- Experience implementing CIAM and/or IGA solutions.
- Strong knowledge of OAuth 2.0, PKCE, SAML and OIDC.
- Experience with identity provisioning, RBAC and lifecycle management.
- Familiarity with Ping Identity/ForgeRock, SailPoint, Microsoft Entra ID or PAM solutions.
- Must be a Canadian Citizen or Permanent Resident.
Benefits
- Defined-benefit pension plan.
- 4 weeks of vacation in the first year.
- Comprehensive health and dental coverage.
- Professional development opportunities.
- Relocation assistance up to $12,000 for eligible candidates.
