Senior Security Engineer – Identity and Access Management

This is a fully remote position, open to applicants in Canada.

📋 Description

• Develop and enhance Identity Governance and Administration capabilities.

• Execute and manage Privileged Access Management within an AWS-centric cloud setting.

• Design and structure Certificate Lifecycle Management for cloud-native applications.

• Integrate Identity and Access Management across AWS services, SaaS platforms, and developer/DevOps pipelines.

• Create identity and access protocols for AI/ML training data, models, and inference APIs.

• Formulate and spearhead effective IAM strategies that align with cloud-native architecture and security principles.

• Broaden and operationalize IGA, PAM, SSO, MFA, access management, secrets management, and certificate lifecycle functionalities.

• Automate identity provisioning, de-provisioning, and access reviews utilizing AI tools and infrastructure-as-code.

• Design IAM integrations for AWS-native services, SaaS platforms, and third-party identity solutions.

• Advocate for least-privilege and zero-trust principles through scalable access controls and policy automation.

• Mentor junior engineers and act as the technical lead for IAM initiatives.

• Collaborate with Security, DevOps, and Infrastructure teams.

• Refine the IAM strategy according to emerging cloud threats and compliance obligations.

⛳️ Requirements

• A minimum of 8 years of relevant experience with a Bachelor’s degree; or 5 years with a Master’s degree; or a PhD with 3 years of experience; or a suitable combination of education and work experience.

• Extensive experience with IAM tools such as Okta, CyberArk, Ping, and SailPoint.

• In-depth understanding of IAM in cloud-native environments, particularly AWS IAM, roles, policies, permissions boundaries, and federation.

• Proficient in infrastructure-as-code tools such as Terraform and CloudFormation.

• Familiar with SAML, OAuth2, OpenID Connect, and Kerberos.

• Solid understanding of Active Directory, LDAP, and cloud-based directory alternatives.

• Practical scripting skills in Python and PowerShell.

• Knowledge of NIST, SOC 2, PCI DSS, and associated compliance standards.

• Experience in integrating IAM into CI/CD pipelines, secrets management, and DevOps workflows.

• Exceptional communication abilities and capacity to influence and lead cross-functional teams.

• Relevant certifications such as CISSP, CISM, CIAM/CAMS, CyberArk Certified, or Okta Certified Consultant are advantageous but not mandatory.

🏝️ Benefits

• Annual bonuses for eligible employees.

• Various health insurance options available.

• Flexible vacation policy with additional floating holidays.

• Retirement savings plan with company contributions.

• Equity options in a publicly-traded company.

• Monthly stipend to facilitate the remote work model.

• Annual development allowance.

• Family-forming benefits.

• Generous parental leave base salary top-up.