IAM Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IAM Engineer based in Canada. This role offers the opportunity to strengthen enterprise security through identity governance, access management, and Zero Trust initiatives. You will design and maintain secure identity solutions that protect critical systems and sensitive data. The position combines technical expertise, security strategy, compliance support, and cross-functional collaboration. You will work with modern IAM platforms, cloud security tools, and enterprise security frameworks to improve access controls. Your contributions will directly support risk reduction, regulatory readiness, and secure digital operations. This is an ideal opportunity for an experienced security professional passionate about identity, automation, and cybersecurity excellence. Accountabilities As an IAM Engineer, you will lead identity and access management initiatives, ensuring secure, compliant, and efficient access across enterprise environments. You will help establish strong governance practices, implement security controls, and support the organization’s broader cybersecurity strategy. Lead and maintain IAM governance frameworks aligned with security best practices and regulatory requirements. Design, implement, and manage identity governance solutions using SailPoint Identity Security Cloud/IdentityIQ as the primary IAM platform and Okta as a secondary platform. Enforce least-privilege access models, role-based access controls, and secure access policies across users, services, and privileged accounts. Manage access lifecycle processes, including joiner, mover, and leaver workflows. Lead quarterly access reviews, access certifications, and remediation of access exceptions. Design and maintain secrets management solutions, including secure storage, credential rotation, and lifecycle management for sensitive information. Support engineering teams with secure secrets handling practices and integration patterns. Validate patch compliance, identify security gaps, and coordinate remediation activities based on risk priorities. Define and enforce encryption standards for data protection across cloud and enterprise systems. Support key management practices and secure communication protocols. Promote Zero Trust security principles through identity-centric access controls and continuous verification practices. Prepare compliance documentation, audit evidence, and security reports while partnering with governance and audit teams. Requirements The ideal candidate is an experienced security professional with strong expertise in identity management, access governance, and enterprise security controls. You should have hands-on experience with IAM platforms, cloud environments, and security compliance practices, combined with strong communication and documentation skills. 5+ years of experience in Security Engineering, IAM, Identity Governance, or related cybersecurity roles. Strong hands-on experience with SailPoint Identity Security Cloud/IdentityIQ and Okta administration. Deep understanding of IAM concepts, including RBAC, ABAC, least-privilege models, and privileged access management. Experience implementing and managing secrets management solutions such as AWS Secrets Manager or equivalent platforms. Proven ability to validate patch compliance, manage security SLAs, and support remediation processes. Strong knowledge of encryption standards, secure communication protocols, and data protection controls. Experience supporting Zero Trust architectures and identity-driven security models. Familiarity with cloud platforms such as AWS, Azure, or GCP. Exposure to compliance frameworks including ISO 27001, SOC 2, PCI-DSS, or NIST. Experience working in large-scale or regulated enterprise environments is preferred. Excellent documentation, communication, and stakeholder management skills. Benefits Fully remote work environment with flexibility to work from your preferred location. Opportunity to work on enterprise-level cybersecurity and identity management initiatives. Exposure to modern IAM platforms, cloud security technologies, and Zero Trust frameworks. Opportunity to contribute to security improvements that protect critical business systems. Collaborative environment with cross-functional teams across technology and security domains. Professional growth opportunities through challenging security projects and continuous learning. Competitive compensation package based on experience, skills, and market conditions. How Jobgether Works We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Lead and maintain IAM governance frameworks and identity solutions using SailPoint and Okta to ensure secure enterprise access. Design secrets management solutions and enforce Zero Trust principles and encryption standards to reduce organizational risk.

Requires over 5 years of experience in Security Engineering or IAM with deep expertise in RBAC, ABAC, and cloud platforms like AWS, Azure, or GCP. Candidates must have hands-on experience with SailPoint and Okta, as well as familiarity with compliance frameworks such as ISO 27001 or SOC 2.

• Fully remote work environment • Opportunity to work on enterprise-level cybersecurity initiatives • Exposure to modern IAM platforms and Zero Trust frameworks • Collaborative environment with cross-functional teams • Professional growth opportunities • Competitive compensation package

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• SailPoint Identity Security Cloud
• SailPoint IdentityIQ
• Okta
• Identity Governance
• RBAC
• ABAC
• Least-Privilege Access
• Privileged Access Management
• Secrets Management
• AWS Secrets Manager
• Zero Trust Architecture
• Encryption Standards
• Patch Compliance
• Cloud Security
• ISO 27001
• SOC 2

• Security & Safety
• Technology
• Software
• Engineering
• Data & Analytics

Expérience minimale

5+ ans

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Niveau d’expérience

Mid-Senior level

Mode de candidature

La candidature directe est offerte