Intermediate Identity Access Management Consultant

We are seeking a highly accomplished Intermediate Identity Access Management Consultant for an enterprise-level contract opportunity based in Toronto. In this role, you will take on a premier technical capacity within identity governance and administration streams, specializing in the design, configuration, deployment, and optimization of enterprise access management architectures.

As a principal identity consultant, you will bridge the gap between complex access policies and automated governance solutions. Operating on-site in Toronto, you will configure request catalog structures, build automated approval workflows, orchestrate real-time streaming services, and design secure UI components for enterprise applications. This position demands a technical authority who can independently troubleshoot entitlement mappings, validate request-to-fulfillment traceability, and support full-lifecycle user access campaigns across large-scale ecosystems.

Location: Toronto, ON

Assignment Type: Onsite (5 days per week)

Contract Duration: 7 months (with potential for extension)

Advantages
Modern Cloud Stack: Direct engineering exposure to Oracle Access Governance (OAG) streaming, custom REST connectors, and cloud identity ecosystems.

Large-Scale Impact: Design and deploy identity governance workflows supporting large enterprise identity environments.

Full-Lifecycle Scope: Own the entire IAM spectrum—from catalog configuration and API integration to real-time event streaming and certification campaigns.

Advanced Integration Engineering: Build custom React UI components and custom adapters for complex SaaS, legacy, and entitlement-heavy ERP platforms.

Responsibilities
Configure identities, accounts, permissions, roles, access bundles, and access catalog items to align with functional design standards.

Support application onboarding by defining and validating account, entitlement, and access mappings across enterprise systems.

Configure identity collections, access collections, approval routing logic, and reviewer ownership models.

Build, maintain, and validate certification campaigns, review scopes, certifier assignments, and automated remediation behavior.

Ingest and process high-volume, real-time event streams from Oracle Access Governance using technologies such as Oracle Streaming, Kafka, or OCI Streaming.

Normalize and transform complex, semi-structured streaming payloads (JSON/XML events containing nested entitlements, risk scores, and audit attributes) into query-optimized schemas.

Develop custom connectors and adapters using Generic REST connectors to orchestrate provisioning and reconciliation for non-standard or legacy applications.

Integrate and manage user access lifecycles across entitlement-heavy environments, including Oracle EBS and Oracle Fusion HCM.

Build and secure React-based user interface components integrated with core governance services to ensure context-driven workflows and auditability.

Analyze system logs, database records, and API feeds using SQL and Java to troubleshoot reconciliation, correlation, and catalog visibility issues.

Author technical configuration workbooks, deployment procedures, operational runbooks, and support defect triage during SIT, UAT, and hypercare phases.

Qualifications
Core Requirements & Technical Capabilities
Identity Governance Tenure: 8+ years of progressive experience in Identity Governance and Administration (IGA), with strong hands-on expertise in Oracle Identity Management and Oracle Access Governance.

Oracle Access Governance (OAG) Depth: 3+ years of dedicated experience working with Oracle Access Governance in large-scale enterprise deployments (supporting 60,000+ user identities).

Process & Workflow Engineering: Proven experience designing end-to-end access request, approval, fulfillment, review, and lifecycle governance processes.

Event Streaming & Data Ingestion: Experience designing and deploying reporting and data ingestion solutions leveraging Oracle streaming services, Kafka, or OCI Streaming, including payload normalization (JSON/XML).

Development & API Proficiency: Strong Java and REST API development skills, alongside experience building and securing React-based user interfaces.

Custom Connectors & ERP Integrations: Expert-level capability developing custom connectors and adapters for legacy/proprietary apps, as well as integrating user lifecycles with Oracle EBS or Oracle Fusion HCM.

Database & Diagnostic Skills: Solid SQL scripting, log analysis, and data validation skills to diagnose configuration and integration issues.

Preferred Assets
Experience with Oracle Identity Governance (OIG) or Oracle Identity Manager (OIM) engineering.

In-depth understanding of Oracle EBS responsibility and role structures, as well as entitlement-heavy HR and Finance applications.

Practical exposure to Oracle Cloud Infrastructure (OCI), Oracle Integration Cloud (OIC), or enterprise integration platforms.

Summary
If you're interested in the "Intermediate Identity Access Management Consultant" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.