Senior Identity Management Specialist

Role: Senior Identity Management Specialist Contract work: 37.7 hours (Overtime may be required) RFC Number: 2026-048 Location: Ottawa Hybrid (required 12 days on-site per month) Terme: Start Aug 24th, Term: 6 months Security Clearance : Secret Language: English Scope: The Consultant will be responsible for providing the following Services Under the direction of the Assistant Director, Cyber IAM Access Control: Design and implement identity solutions leveraging Microsoft Entra ID, including RBAC, Conditional Access Policies, and identity governance capabilities Implement and integrate secure authentication mechanisms using OAuth2, OpenID Connect, SAML, LDAP, and Kerberos across hybrid environments Implement and support Privileged Identity Management (PIM) and Just-in-Time (JIT) access models, ensuring least-privilege and segregation of duties Design and enforce multi-factor authentication strategies, including strong MFA methods and risk-based access policies Integrate Active Directory and Cloud Identity Services (Entra ID), supporting enterprise authentication patterns Build and integrate identity capabilities into CI/CD pipelines (Azure DevOps or equivalent), ensuring secure delivery and automation of IAM services Develop integrations using REST APIs, Microsoft Graph, and identity provisioning patterns (SCIM or equivalent) Implement and manage service accounts, manage identities, and certificate-based authentication patterns Leverage Azure services (Key Vault, RBAC, Managed Identities) for secrets and identity security Contribute to identity patterns for machine identities and AI agent scenarios where applicable Author technical specifications and implement secure, scalable IAM solutions aligned with enterprise architecture Provide technical guidance to team members, conduct knowledge transfer, and collaborate with cross-functional stakeholders Stay current with IAM trends and contribute to evolving enterprise identity strategy Support the development and maintenance of processes Qualifications & Skills The Consultant should have the following qualifications and skills: University degree in computer science, engineering, cyber security, or related field A minimum of seven (7) years in software engineering or DevOps A minimum of three (3) years in Identity and Access Management Demonstrated strong expertise in Microsoft Entra ID (Azure AD), including roles, permissions, and identity management concepts Demonstrated hands-on experience implementing and managing Conditional Access policies Demonstrated experience with Privileged Identity Management (PIM) and just-in-time access controls Demonstrated experience with Identity Governance and Administration (IGA) capabilities including access lifecycle and entitlement management Demonstrated strong understanding and implementation experience with OAuth2, OpenID Connect, SAML, LDAP, and Kerberos authentication protocols Demonstrated experience implementing multi-factor authentication (MFA) and strong authentication methods in enterprise environments Demonstrated strong understanding of hybrid identity architectures integrating Active Directory with cloud identity providers Demonstrated hands-on experience with Azure services including RBAC, Managed Identities, and integration with identity platforms Demonstrated experience with CI/CD pipelines and DevOps practices, preferably with Azure DevOps or equivalent platforms Demonstrated experience developing and integrating REST APIs, including Microsoft Graph API Demonstrated strong experience scripting and automation skills using PowerShell, Python, or JavaScript Demonstrated experience implementing or managing service accounts, workload identities, or certificate-based authentication Demonstrated understanding of modern identity security principles including Zero Trust and least privilege access models Demonstrated ability to produce clear, well-organized, business-consumable documentation Demonstrated strong analytical and problem-solving skills with the ability to make sound technical decisions Demonstrated strong communication and stakeholder engagement skills in a cross-functional environment Additional Qualifications The following will also be considered: Demonstrated experience with certificate lifecycle management platforms Demonstrated experience in public sector or large enterprise environments Demonstrated Familiarity with identity-based access control solutions in hybrid environments