Senior ICAM Architect: Federation/IGA/PAM (Remote Canada)

Senior Technical Architect – ICAM (Federation / IGA / PAM)

Job ID: 14328

Contract Length: 24+ Months

Location: Remote from within Canada

Federal Government Clearance Level Required: Secret (Level II)

Vacancy Type: New Positions

About Us

Maplesoft Group is currently seeking Senior Technical Architects – ICAM for our Federal Government client in Canada.

We are hiring for three separate Senior Technical Architect positions supporting secure enterprise Identity, Credential, and Access Management (ICAM) solutions.

Applicants must clearly identify which position they are applying for:

• Senior Technical Architect – Federation / Identity Provider (IdP)
• Senior Technical Architect – Identity Governance & Administration (IGA)
• Senior Technical Architect – Privileged Access Management (PAM)

Position Summary

The Senior Technical Architect will support the design, integration, and implementation of secure enterprise ICAM solutions aligned with enterprise architecture standards, Zero Trust principles, and data-centric security.

The successful candidates will provide technical architecture leadership within their assigned ICAM domain, supporting secure enterprise environments across cloud, classified, and unclassified domains.

Common Responsibilities (All Positions)

• Gather and document technical, business, security, and integration requirements.
• Develop end-to‑end ICAM target architectures.
• Design secure integration patterns across enterprise, cloud, classified, and unclassified environments.
• Integrate ICAM solutions with Active Directory, PKI, authentication services, cloud platforms, and enterprise applications.
• Develop technical architecture, system design, configuration, and integration documentation.
• Create CONOPS, system integration plans, test plans, test cases, and operational documentation.
• Guide implementation teams and coordinate delivery of ICAM solutions into production.
• Support Requests for Change (RFCs) and Security Assessment and Authorization activities.
• Advise stakeholders on Zero Trust principles, security implications, and recommended technical approaches.
• Brief senior management and provide progress reporting.
• Attend client facilities in Ottawa when physical presence is required.

Role 1: Senior Technical Architect – Federation / Identity Provider (IdP)

Required Qualifications

• Minimum 10 years within the last 15 years designing, configuring, and maintaining IM/IT systems supporting 5,000+ users.
• Minimum 7 years within the last 10 years designing, implementing, integrating, or supporting an Identity Provider (IdP) or Single Sign-On (SSO) solution supporting 4,000+ active users.
• Experience producing ICAM technical documentation.
• Experience writing at least four of the following for ICAM projects within the last 10 years:
  • Concept of Operations (CONOPS)
  • Technical architecture documentation
  • System design documents
  • Build or configuration documents
  • System Integration Plans
  • Test plans, test cases, or reports

Preferred Qualifications

• Two or more recent IdP implementation or architecture projects lasting six months or longer and supporting 1,000+ users.
• Two or more recent cloud-based ICAM projects.
• Recent experience or certification in:
  • SSO / Federation
  • Identity lifecycle management
  • IGA
  • PAM
  • PKI

Role 2: Senior Technical Architect – Identity Governance & Administration (IGA)

Required Qualifications

• Minimum 10 years within the last 15 years designing, configuring, and maintaining IM/IT systems supporting 10,000+ users.
• Minimum 7 years within the last 10 years designing, implementing, integrating, or supporting an Identity Governance and Administration (IGA) solution supporting 4,000+ active users.
• Minimum one year experience briefing Director-level or higher management on IT security implications and recommended actions.
• Experience producing ICAM technical documentation.
• Experience writing at least five of the following for ICAM projects within the last 10 years:
  • Concept of Operations (CONOPS)
  • Technical architecture documentation
  • System design documents
  • Build or configuration documents
  • System Integration Plans
  • Test plans, test cases, or reports
• Preferred Qualifications
• Two or more recent IGA implementation or architecture projects lasting six months or longer and supporting 1,000+ users.
• Two or more recent hybrid/cloud IGA projects.
• Recent experience or certification in:
  • SSO / Federation
  • Identity Manager
  • IGA

Role 3: Senior Technical Architect – Privileged Access Management (PAM)

Required Qualifications

• Minimum 10 years within the last 15 years designing, configuring, and maintaining IM/IT systems supporting 10,000+ users.
• Minimum 7 years within the last 10 years designing, implementing, integrating, or supporting a Privileged Access Management (PAM) solution supporting 1,000+ active users.
• Minimum one year experience briefing Director-level or higher management on IT security implications and recommended actions.
• Experience producing ICAM technical documentation.
• Experience writing at least five of the following for ICAM projects within the last 10 years:
  • Concept of Operations (CONOPS)
  • Technical architecture documentation
  • System design documents
  • Build or configuration documents
  • System Integration Plans
  • Test plans, test cases, or reports

Preferred Qualifications

• Two or more recent PAM implementation or architecture projects lasting six months or longer and supporting 1,000+ users.
• Two or more recent cloud PAM projects.
• Recent experience or certification in:
  • SSO / Federation
  • PAM solutions

Common Qualifications (All Positions)

• Valid Government of Canada Secret (Level II) clearance.
• University degree in science, mathematics, engineering, or IM/IT; or a minimum two-year college diploma in a related field.
• Ability to provide proof of degree or diploma.
• English fluency.
• Experience designing solutions requiring interoperability between Government of Canada departments, agencies, or partners.

Compensation

Salary Range: $90.00 – $100.00 per hour

Our recruitment process is led by human recruiters who review all applications and make the final hiring decisions. We use AI-assisted tools to help screen and organize applications. These tools do not replace human judgment, and all hiring decisions are made by people.

Please note that data collected by the Company may be stored or processed on servers located outside of Canada.

Application Submission Details

Submission Deadline: Tuesday, August 4, 2026 – 12:00 PM EST

Maplesoft is an equal opportunity employer and welcomes applications from all qualified candidates. Accommodations are available upon request throughout the recruitment process.

#J-18808-Ljbffr