(PRO) Lead IAM Specialist

About Highspring

Highspring is a next-generation consulting and professional services firm. We deliver modern, agile, and forward-thinking solutions to our clients across North America. We partner with leading organizations to help them strengthen their technology capabilities, modernize operations, and build secure, scalable solutions. At Highspring, we believe in empowering our people, fostering technical leadership, and delivering meaningful business impact.

The Opportunity

We are seeking a Senior Specialist, Identity & Access Management (IAM) to support a major enterprise security transformation. This is a senior-level position that combines hands-on technical expertise with strategic leadership in Identity and Access Management.

As a key member of a growing IAM practice, you will play a critical role in defining governance, strengthening controls, improving access management processes, and guiding IAM strategy across a complex Microsoft-centric environment. This role is ideal for professionals who enjoy balancing technical execution with oversight, risk management, and program development.

Location: Montreal, QC or Ottawa, ON

Work Model: Hybrid (3 days in office required;)

Employment Type: Permanent, Full-Time

Language: English required; bilingualism is considered an asset

What You’ll Do

• Lead the evolution and governance of the enterprise Identity and Access Management framework.
• Define, implement, and maintain IAM policies, standards, control objectives, and governance practices.
• Establish and enforce identity lifecycle management processes, role-based access control (RBAC), least privilege principles, segregation of duties, and access exception management.
• Assess and communicate identity-related risks and provide recommendations to senior leadership.
• Ensure IAM practices align with security, privacy, audit, and regulatory requirements.
• Provide expert guidance on IAM considerations for cloud initiatives, new applications, and third-party integrations.
• Monitor, measure, and report on IAM KPIs and KRIs, including executive-level reporting on access risk and control effectiveness.
• Support audits, compliance initiatives, investigations, and regulatory reviews related to identity and access controls.
• Collaborate closely with infrastructure, security, operations, audit, privacy, and business stakeholders.
• Mentor and provide functional leadership to IAM team members while remaining actively involved in technical delivery and operational execution.

What You Bring to the Table

• Bachelor's degree in Information Technology, Cybersecurity, or a related discipline, or an equivalent combination of education and experience.
• 10+ years of progressive experience in IAM, cybersecurity, information security, or IT risk management.
• Demonstrated experience advising senior leadership on enterprise access risk and security governance.
• Proven experience designing, implementing, governing, or maturing IAM programs and control frameworks.
• Strong understanding of enterprise security, risk management, compliance, and audit requirements.
• Ability to influence stakeholders and drive cross-functional initiatives.
• Excellent communication, leadership, and problem-solving skills.

Core Skills Required

• Advanced Identity and Access Management expertise.
• Microsoft Entra ID (Azure AD).
• CyberArk.
• Identity lifecycle management.
• Role-Based Access Control (RBAC).
• Privileged Access Management (PAM).
• Access governance and compliance.
• IAM strategy and program governance.
• Security controls and risk management.
• Audit and regulatory compliance.
• Hybrid cloud security environments.
• Technical leadership and stakeholder management.

Our Stack

• Microsoft Entra ID (Azure AD)
• CyberArk
• Microsoft ecosystem
• Hybrid infrastructure (on-premises + Azure)
• Enterprise IAM and access governance platforms

Why Join Highspring

• Work on a high-impact IAM transformation initiative within a growing security practice.
• Help shape and mature enterprise IAM capabilities from the ground up.
• Join a collaborative and technically strong consulting environment.
• Receive competitive compensation, including performance-based bonus opportunities.
• Access comprehensive benefits and long-term retirement programs.
• Benefit from continuous learning, professional development, and career growth opportunities.

À propos de Highspring

Highspring est une firme de consultation et de services professionnels de nouvelle génération. Nous offrons à nos clients partout en Amérique du Nord des solutions modernes, agiles et tournées vers l’avenir. Nous collaborons avec des organisations de premier plan afin de renforcer leurs capacités technologiques, moderniser leurs opérations et développer des solutions sécuritaires et évolutives. Chez Highspring, nous croyons au développement du leadership technique, à l’autonomie de nos employés et à la création d’un impact durable pour nos clients.

L’opportunité

Nous sommes à la recherche d’un Spécialiste principal, Gestion des identités et des accès (IAM) pour contribuer à une importante transformation en cybersécurité.

Ce poste de niveau senior combine une expertise technique approfondie avec un rôle de leadership en gouvernance et en stratégie IAM. Vous participerez à la création et à l’évolution d’une pratique IAM, en contribuant à l’établissement des contrôles, des normes et des processus qui encadrent les identités numériques et les droits d’accès dans un environnement Microsoft hybride.

Lieu : Montréal (QC) ou Ottawa (ON)

Mode de travail : Hybride (présence au bureau requise 3 jours par semaine)

Type d’emploi : Permanent, temps plein

Langue : Anglais requis; bilinguisme considéré comme un atout

Ce que vous ferez

• Assurer le leadership et la gouvernance du cadre de gestion des identités et des accès à l’échelle de l’entreprise.
• Définir, mettre en œuvre et maintenir les politiques, normes et contrôles IAM.
• Établir et faire respecter les principes de gestion du cycle de vie des identités, de contrôle d’accès basé sur les rôles (RBAC), de moindre privilège et de séparation des tâches.
• Évaluer les risques liés aux identités et aux accès et fournir des recommandations aux équipes de direction.
• Veiller à l’alignement des contrôles IAM avec les exigences de sécurité, de confidentialité, d’audit et de conformité réglementaire.
• Fournir des conseils spécialisés concernant les initiatives infonuagiques, les nouvelles applications et les intégrations de tiers.
• Définir, suivre et présenter les indicateurs clés de performance (KPI) et de risque (KRI) liés à l’IAM.
• Participer aux audits, aux enquêtes et aux examens réglementaires touchant les contrôles d’accès.
• Collaborer avec les équipes d’infrastructure, de sécurité, d’opérations, d’audit, de protection des renseignements personnels et les partenaires d’affaires.
• Encadrer les membres de l’équipe IAM tout en demeurant activement impliqué dans les activités techniques et opérationnelles.

Ce que vous apportez

• Baccalauréat en technologies de l’information, cybersécurité ou domaine connexe, ou combinaison équivalente de formation et d’expérience.
• Plus de 10 ans d’expérience progressive en IAM, cybersécurité, sécurité de l’information ou gestion des risques TI.
• Expérience démontrée à conseiller la haute direction sur les risques liés aux accès et à la sécurité.
• Expérience pertinente dans la conception, l’implantation ou la gouvernance de programmes IAM et de cadres de contrôle.
• Solide compréhension des enjeux de sécurité, de conformité, de gestion des risques et d’audit.
• Capacité à influencer les parties prenantes et à diriger des initiatives transversales.
• Excellentes aptitudes en communication, leadership et résolution de problèmes.

Compétences clés requises

• Expertise avancée en gestion des identités et des accès (IAM)
• Microsoft Entra ID (Azure AD)
• CyberArk
• Gestion du cycle de vie des identités
• Contrôle d’accès basé sur les rôles (RBAC)
• Gestion des accès privilégiés (PAM)
• Gouvernance des accès et conformité
• Stratégie et gouvernance IAM
• Gestion des risques et contrôles de sécurité
• Audits et conformité réglementaire
• Environnements hybrides (sur site et Azure)
• Leadership technique et gestion des parties prenantes

Notre environnement technologique

• Microsoft Entra ID (Azure AD)
• CyberArk
• Écosystème Microsoft
• Infrastructure hybride (sur site et Azure)
• Solutions corporatives de gouvernance des identités et des accès

Pourquoi joindre Highspring

• Participer à une transformation IAM d’envergure au sein d’un environnement de cybersécurité en pleine croissance.
• Contribuer directement à la création et à la maturité d’une pratique IAM stratégique.
• Travailler dans un environnement collaboratif axé sur l’excellence technique.
• Profiter d’une rémunération concurrentielle incluant un programme de bonification.
• Accéder à un régime complet d’avantages sociaux et d’épargne-retraite.
• Bénéficier d’occasions continues de formation, de mentorat et d’évolution professionnelle.

By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions.

EEO Notice

Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law.

Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact HR@vaco.com.

Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal.

Representation Notice

By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.

For residents of Ontario, Canada: Based on Highspring’s discussions with its Client, Highspring’s understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly).

Privacy Notice

Vaco by Highspring and its parents, affiliates, and subsidiaries (“we,” “our,” or “Vaco by Highspring”) respects your privacy and are committed to providing transparent notice of our policies.

• California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.
• Virginia residents may access our state specific policies here.
• Residents of all other states may access our policies here.
• Canadian residents may access our policies in English here and in French here.
• Residents of countries governed by GDPR may access our policies here.

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring’s use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client’s use of AI products in hiring.

Pay Transparency Notice

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:

• the individual’s skill sets, experience and training;
• licensure and certification requirements;
• office location and other geographic considerations;
• other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.