Security Engineer II – Identity and Access Management

This is a fully remote position, open to applicants in Canada.

📋 Description

• Develop capabilities in Identity Governance and Administration.

• Establish and manage Privileged Access Management within an AWS-centric cloud setting.

• Integrate Identity and Access Management across AWS services, SaaS solutions, and developer/DevOps workflows.

• Design access and identity controls for AI/ML systems, including training data, models, and inference APIs.

• Set up and oversee Okta SSO, MFA, lifecycle management, policies, SAML/OIDC integrations, and SCIM provisioning.

• Manage just-in-time access profiles and Privileged Access Management policies using tools like Britive or CyberArk.

• Enhance and develop access request, approval, and review processes in Identity Governance Administration platforms like Lumos or SailPoint.

• Automate onboarding, transitioning, and offboarding processes, as well as access reviews, utilizing scripting, APIs, and infrastructure-as-code.

• Collaborate with Security, DevOps, and Infrastructure teams to onboard applications and cloud accounts while addressing access challenges.

• Assist with SOC 2, PCI DSS, and other audits by generating access evidence and refining control design.

• Document procedures, contribute to operational manuals, and participate in on-call rotations as required.

⛳️ Requirements

• At least 3 years of relevant experience along with a Bachelor’s degree; or 2 years with a Master’s degree; or a suitable combination of education and experience.

• Practical experience with IAM tools including Okta, Entra ID, CyberArk, Ping, and SailPoint.

• Familiarity with SAML, OAuth2/OIDC, and SCIM protocols.

• Understanding of AWS IAM principles, including roles, policies, and federation.

• Knowledge of least privilege and Role-Based Access Control (RBAC).

• Proficient in scripting languages such as Python or PowerShell for automating IAM tasks via APIs.

• Knowledgeable about Active Directory, LDAP, and cloud-based directory alternatives.

• Understanding of compliance frameworks such as NIST, SOC 2, and PCI DSS.

• Strong communication and collaboration skills with both technical and non-technical stakeholders.

🏝️ Benefits

• Various health insurance options available.

• Flexible vacation policy including additional floating holidays.

• Retirement savings plan with company contributions.

• Equity options in a publicly traded company.

• Monthly stipend to facilitate remote work.

• Annual development allowance.

• Family-forming benefits offered.

• Generous parental leave with base salary top-up.

• Annual bonuses for eligible employees.