Senior Identity Management Specialist to design and implement enterprise identity solutions using

Our crown corporation client is seeking a Senior Identity Management Specialist to design and implement enterprise identity solutions using Microsoft Entra ID within hybrid environments

Join a leading public sector financial institution driving transformation across complex hybrid identity infrastructures. This role delivers advanced authentication and access control solutions leveraging Microsoft Entra ID, Azure services, and modern identity protocols. The consultant will design and implement secure, scalable IAM systems aligned with enterprise architecture and regulatory standards. This engagement runs through December with an optional extension.

Initial 16-Month Contract with strong possibility of extension in Ottawa, ON. 7.5 hours per day, Monday to Friday. Preference will be given for candidates who can work on-site in Ottawa, ON hybrid on-site 12 days/mo, however % remote options are available.

Responsibilities

• Design and implement identity solutions leveraging Microsoft Entra ID including RBAC, Conditional Access Policies, and governance capabilities
• Implement and integrate secure authentication mechanisms using OAuth2, OpenID Connect, SAML, LDAP, and Kerberos
• Develop and manage Privileged Identity Management and Just-in-Time access models
• Design and enforce multi-factor authentication strategies and risk-based access policies
• Integrate Active Directory and Cloud Identity Services supporting hybrid enterprise authentication
• Build and integrate identity services into CI/CD pipelines ensuring secure delivery and automation
• Develop identity integrations using REST APIs, Microsoft Graph, and provisioning patterns such as SCIM
• Leverage Azure services including Key Vault, RBAC, and Managed Identities for secure identity management
• Author technical specifications and contribute to IAM architecture and documentation

Must Haves

• Eligible for Secret Clearance ( Candidate must reside in Canada for a minimum of 5 years to be eligible to apply)
• Minimum 7 years in software engineering or DevOps
• 3 years in Identity and Access Management (IAM)
• Strong expertise in Microsoft Entra ID (Azure AD) with roles, permissions, RBAC, and identity governance
• Hands-on implementation of Privileged Identity Management (PIM), Conditional Access policies, and just-in-time access controls
• Deep experience with OAuth2, OpenID Connect, SAML, LDAP, and Kerberos authentication protocols

Nice to Have

• Experience with certificate lifecycle management platforms
• Experience in public sector or large enterprise environments
• Familiarity with identity-based access control solutions in hybrid environments
• University degree in computer science, engineering, cyber security, or a related field