Talent.com
Astra North Infoteck Inc.
Senior IAM Engineer (Azure Entra ID, Identity Governance, RBAC, PIM)Astra North Infoteck Inc. • Toronto, ON, ca
Senior IAM Engineer (Azure Entra ID, Identity Governance, RBAC, PIM)

Senior IAM Engineer (Azure Entra ID, Identity Governance, RBAC, PIM)

Astra North Infoteck Inc. • Toronto, ON, ca
12 days ago
Job type
  • Full-time
Job description
Job Description
Job Title: Senior IAM Engineer (Azure Entra ID, Identity Governance, PIM, RBAC)

Key Responsibilities

• Design and implement Azure Entra ID (formerly Azure AD) identity governance frameworks
• Configure and manage Privileged Identity Management (PIM) for just-in-time privileged access
• Implement and enforce Conditional Access policies, MFA, and phishing-resistant authentication (FIDO2, Passkeys)
• Manage RBAC role assignments across Azure subscriptions, resource groups, and management groups
• Remediate guest user accounts, stale identities, and excessive permission assignments
• Configure and maintain Break Glass (emergency access) accounts with monitoring and alerting
• Integrate Microsoft Defender for Cloud governance rules with ServiceNow for ticketing workflows
• Support cross-cloud IAM alignment across AWS IAM and OCI IAM where applicable
• Participate in IAM audits, access reviews, and compliance reporting
• Develop IAM runbooks, RBAC mapping documentation, and onboarding guides

Required Qualifications

• 5+ years of IAM experience, with 3+ years in Microsoft Azure / Entra ID
• Deep knowledge of Azure RBAC, PIM, Conditional Access, and Entra ID roles
• Experience with MFA enforcement, authentication methods, and access policies
• Understanding of identity lifecycle management and access certification processes
• Familiarity with Microsoft Defender for Cloud and Secure Score recommendations
• Experience with ServiceNow or ticketing system integrations for IAM workflows
• Microsoft Certified: Identity and Access Administrator (SC-300) preferred
• Strong documentation and stakeholder communication skills

Nice to Have

• Experience with AWS IAM, Organizations, and SCPs
• Knowledge of OCI IAM compartments and policy structures
• Exposure to SASE or Zero Trust Network Access (ZTNA) frameworks


Requirements
Sailpoint
Create a job alert for this search

Senior IAM Engineer (Azure Entra ID, Identity Governance, RBAC, PIM) • Toronto, ON, ca

Similar jobs

Lead Engineer, Identity Governance And Administration - Iam - $180,000 - $200,000 A Year

Raymond JamesNorth York, Canada
Full-time

Lead IAM Engineer responsible for identity governance and administration, focusing on enterprise standards and platform modernization for a wealth management solution. Show more

 • Promoted

Lead Iam Engineer - Identity Governance (Hybrid) - $180,000 - $200,000 A Year

Raymond James Ltd.East York, Canada
Full-time

Senior Lead Engineer responsible for Identity Governance and Administration (IAM) initiatives in a leading investment firm, ensuring compliance and leading projects. Show more

 • Promoted

Senior Iam Engineer: Entra Id, Sso & Ad Transitions - C$110,000 - C$125,000 A Year

Global IAM firmEast York, Canada
Full-time

Seeking a Senior IAM Engineer in Calgary for Authentication Management (Entra ID, OKTA, ClearPass), focusing on operational excellence and GPO health. Show more

 • Promoted

Senior Iam Engineer — Oauth, Sso & Rbac (Hybrid) - C$137,000 - C$189,000 A Year

MongoDBEast York, Canada
Full-time

Design and deliver secure services for internal and external users.Requires 5+ years of experience in backend systems. Show more

 • Promoted

Senior Manager AI Architect – EY

EYtoronto, on, Canada
Full-time

Enhance your career at EY as a Senior Manager specializing in AI architecture and design.This pivotal role focuses on creating agentic AI solutions that foster intelligent decision-making.In this c... Show more

 • Promoted

Senior IAM & PKI Systems Engineer (Hybrid)

GenpactToronto, ON, CA
Full-time

A global professional services firm in Toronto is looking for a Senior System Administrator specializing in Identity & Access Management (IAM) and Public Key Infrastructure (PKI).This hybrid positi... Show more

 • Promoted

Senior Iam Engineer - C$125,000 - C$135,000 A Year

Momentum Financial Services GroupEast York, Canada
Full-time

Seeking an experienced IAM Engineer to design, implement, and maintain Identity and Access Management solutions across various platforms, manage user lifecycles, and enhance security posture throug... Show more

 • Promoted

Senior Iam Architect: Build Secure, Scalable Identities - C$120,000 - C$155,000 A Year

EPAM SystemsToronto County, Canada
Full-time

Architect, design, and build security solutions, leading security architecture implementation. Show more

 • Promoted

Senior IAM Architect - SailPoint IIQ & RBAC Leader

Air CanadaToronto, ON, CA
Full-time

A leading airline company in Toronto is hiring an IAM Solutions Architect to design and enhance IAM and Identity Governance solutions.The role requires deep expertise in IAM practices and SailPoint... Show more

 • Promoted

Iam Engineer – Identity Lifecycle Management - $110,000 - $125,000 A Year

Finning InternationalNorth York, Canada
Full-time

Senior IAM specialist focused on identity lifecycle management, JML automation, account hygiene, and group management for compliance and governance. Show more

 • Promoted

Staff Iam Engineer: Identity Platform Architect - C$163,700 - C$245,500 A Year

Kong Inc.Toronto County, Canada
Full-time

Design advanced identity solutions, focusing on OAuth and security protocols, for a cloud API technologies developer. Show more

 • Promoted

Enterprise Iam Architect | Strategy, Sso & Pam Leader - $125,000 - $140,000 A Year

Finning International Inc.Toronto County, Canada
Full-time

IAM Architect needed to design and implement an enterprise Identity and Access Management ecosystem, developing policies and collaborating with stakeholders. Show more

 • Promoted

CIAM Architect: ForgeRock & Cloud IAM Leader

ScotiabankToronto, ON, CA
Full-time

A leading Canadian bank is seeking an IAM Architect to join their Information Security team in Toronto.The successful candidate will define architectural patterns and advise on technical solutions ... Show more

 • Promoted

Senior Iam Engineer - Identity Lifecycle & Jml Automation - $110,000 - $125,000 A Year

Global Services ProviderEast York, Canada
Full-time

Senior IAM Engineer focused on automating identity lifecycle and permissions, ensuring account hygiene and group management in a hybrid global team. Show more

 • Promoted

Senior Infrastructure Engineer — Scale AI Recs in Toronto

Viggletoronto, on, Canada
Full-time

An innovative startup at the forefront of the GenAI revolution is seeking a Senior Infrastructure Engineer to join their dynamic team in Toronto.This role involves leading the design and developmen... Show more

 • Promoted

Senior IAM Engineer/ForgeRock

BULL-IT SOLUTIONS LTDToronto, ON, CA
Full-time

Tips: Provide a summary of the role, what success in the position looks like, and how this role fits into the organization overall.JavaJ2EE, Spring framework, Gradle, NodeJS, Restful APIs, Cloud SQ... Show more

 • Promoted

Senior Iam Lead Engineer - Enterprise Identity & Access - $180,000 - $200,000 A Year

Raymond James FinancialNorth York, Canada
Full-time

Lead Engineer for Identity Governance and Administration to enhance wealth platform, focusing on SaaS transformation and IAM technical initiatives. Show more

 • Promoted

Enterprise Azure Iam & Sso Architect - C$95,000 - C$145,000 A Year

IT consulting firmNorth York, Canada
Full-time

Seeking an experienced Identity Architect to design Azure Entra ID authentication and SSO architectures for a leading IT consulting firm in Toronto.Requires 10+ years of experience and familiarity ... Show more

 • Promoted

IAM Implementation Engineer: Saviynt, AD & Entra

QuerentiaToronto, Ontario, Canada
Full-time

A leading technology company in Canada is seeking a hands-on Implementation Engineer to implement and integrate identity and access management (IAM) solutions.The ideal candidate will have strong e... Show more

 • Promoted

Remote CIAM Innovation Engineer

Affirmtoronto, on, Canada
Remote
Full-time

Unlock your potential as a Remote CIAM Innovation Engineer, specializing in customer identity and authentication solutions.Your engineering prowess will enhance backend services that enrich account... Show more