(PRO) Senior IAM Specialist

About Highspring

Highspring is a next-generation consulting and professional services firm. We deliver modern, agile, and forward-thinking solutions to our clients across North America. We partner with leading organizations to solve complex business and technology challenges while empowering our consultants to make a meaningful impact. At Highspring, we value collaboration, technical excellence, and continuous growth.

The Opportunity

Highspring is seeking a Senior Identity & Access Management (IAM) Specialist to support a major security and access management transformation initiative. This role is ideal for a hands-on IAM professional who thrives in building and maturing IAM capabilities within a Microsoft-centric environment.

This is a senior individual contributor position focused on strengthening identity governance, access controls, and compliance processes across a hybrid infrastructure environment. The successful candidate will play a key role in establishing and improving IAM practices while ensuring secure and appropriate access throughout the organization.

Location: Ottawa, ON or Montreal, QC

Language: English essential; bilingualism is considered an asset

Work Arrangement: Hybrid, with onsite presence three days per week

What You’ll Do

• Interpret identity lifecycle events, including onboarding, transfers, role changes, and offboarding, to determine appropriate access requirements.
• Validate and authorize access provisioning and deprovisioning activities in accordance with approved access models and security policies.
• Lead end-to-end access reviews and certifications for assigned systems and applications.
• Investigate, identify, and remediate inappropriate, excessive, or unauthorized access.
• Monitor IAM operations and access activity to identify control weaknesses, compliance gaps, and policy deviations.
• Maintain the integrity, completeness, and auditability of IAM records and supporting documentation.
• Participate in security and access-related incident investigations, including root cause analysis and corrective action planning.
• Drive continuous improvement initiatives related to IAM controls, governance processes, and risk management.
• Apply sound judgment when evaluating complex or non-standard access scenarios.
• Collaborate with security, infrastructure, and business stakeholders to strengthen identity and access management practices.

What You Bring to the Table

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline, or equivalent practical experience.
• Minimum 5 years of experience in Identity & Access Management, information security, or IT operations.
• Relevant security certification completed or in progress (such as Security+ or IAM-related certifications).
• Strong analytical, investigative, and problem-solving abilities.
• Demonstrated experience assessing access risks and applying appropriate control measures.
• Ability to interpret policies, procedures, and regulatory requirements and apply them consistently.
• Strong communication and stakeholder management skills.
• Experience working independently with a high degree of accountability and ownership.

Core Skills Required

• Identity & Access Management (IAM)
• Microsoft Entra ID / Azure Active Directory
• CyberArk Privileged Access Management
• Identity lifecycle management
• Access provisioning and deprovisioning
• Access reviews and certifications
• Role-based access control (RBAC)
• Identity governance and administration
• Audit and compliance support
• Incident investigation and root cause analysis
• Hybrid infrastructure environments (on-premises and Azure)
• Security controls, policies, and risk management

Our Stack

• Identity Platform: Microsoft Entra ID / Azure Active Directory
• Privileged Access Management: CyberArk
• Cloud Environment: Microsoft Azure
• Infrastructure: Hybrid (On-Premises and Cloud)
• Security Focus: Identity Governance, Access Controls, Compliance, and Risk Management

Why Join Highspring

• Contribute to a high-impact security transformation initiative.
• Work within a modern Microsoft-focused technology environment.
• Collaborate with experienced technology and security professionals.
• Access continuous learning, professional development, and certification opportunities.
• Benefit from flexible work arrangements and a collaborative consulting culture.
• Support meaningful projects that deliver long-term business value.

À propos de Highspring

Highspring est une firme de consultation et de services professionnels de nouvelle génération. Nous livrons des solutions modernes, agiles et innovantes à nos clients partout en Amérique du Nord. Nous collaborons avec des organisations de premier plan afin de relever des défis complexes en affaires et en technologie tout en permettant à nos consultants d’avoir un impact concret. Chez Highspring, nous valorisons la collaboration, l’excellence technique et le développement continu.

L’opportunité

Highspring est à la recherche d’un(e) Spécialiste principal(e) en gestion des identités et des accès (IAM) pour soutenir une importante initiative de transformation en sécurité et gestion des accès.

Ce poste de contributeur individuel sénior s’adresse à un professionnel pratique de l’IAM qui souhaite participer à la mise en place et à l’évolution de capacités de gestion des identités dans un environnement fortement axé sur les technologies Microsoft.

Le candidat retenu contribuera à renforcer la gouvernance des identités, les contrôles d’accès et les exigences de conformité dans un environnement hybride combinant infrastructures locales et services infonuagiques.

Lieu : Ottawa (Ontario) ou Montréal (Québec)

Langue : Anglais essentiel; le bilinguisme constitue un atout

Mode de travail : Hybride avec présence au bureau trois jours par semaine

Ce que vous ferez

• Interpréter les événements liés au cycle de vie des identités, notamment l’intégration, les changements de rôle, les transferts et les départs.
• Valider et autoriser les demandes d’attribution et de retrait d’accès conformément aux modèles de sécurité approuvés.
• Diriger les revues d’accès et les certifications pour les systèmes et applications sous votre responsabilité.
• Identifier, enquêter et corriger les accès inappropriés, excessifs ou non autorisés.
• Surveiller les activités IAM afin de détecter les faiblesses de contrôle, les écarts de conformité et les déviations aux politiques.
• Assurer l’intégrité, l’exhaustivité et la traçabilité des dossiers et preuves liés à l’IAM.
• Participer aux enquêtes d’incidents de sécurité liés aux accès et réaliser des analyses de causes fondamentales.
• Contribuer à l’amélioration continue des processus, contrôles et pratiques de gouvernance IAM.
• Exercer un jugement éclairé lors de l’évaluation de scénarios d’accès complexes ou non standards.
• Collaborer avec les équipes de sécurité, d’infrastructure et les partenaires d’affaires pour renforcer les pratiques IAM.

Ce que vous apportez à l’équipe

• Baccalauréat en technologies de l’information, cybersécurité, informatique ou domaine connexe, ou expérience équivalente.
• Minimum de 5 ans d’expérience en gestion des identités et des accès, en cybersécurité ou en opérations informatiques.
• Certification pertinente complétée ou en cours d’obtention (Security+, certification IAM ou équivalent).
• Excellentes capacités d’analyse, d’investigation et de résolution de problèmes.
• Expérience démontrée dans l’évaluation des risques liés aux accès et l’application de contrôles appropriés.
• Capacité à interpréter et appliquer des politiques, procédures et exigences réglementaires.
• Solides compétences en communication et en collaboration avec les parties prenantes.
• Capacité à travailler de façon autonome avec un haut niveau d’imputabilité.

Compétences clés requises

• Gestion des identités et des accès (IAM)
• Microsoft Entra ID / Azure Active Directory
• CyberArk
• Gestion du cycle de vie des identités
• Provisionnement et déprovisionnement des accès
• Revues et certifications d’accès
• Contrôle d’accès basé sur les rôles (RBAC)
• Gouvernance des identités et des accès
• Conformité, audit et gestion des risques
• Enquête d’incidents et analyse de causes fondamentales
• Environnements hybrides (sur site et Azure)
• Contrôles de sécurité et gouvernance des accès

Notre environnement technologique

• Plateforme d’identité : Microsoft Entra ID / Azure Active Directory
• Gestion des accès privilégiés : CyberArk
• Infonuagique : Microsoft Azure
• Infrastructure : Environnement hybride (sur site et infonuagique)
• Sécurité : Gouvernance des identités, contrôles d’accès, conformité et gestion des risques

Pourquoi joindre Highspring

• Participer à une initiative stratégique de transformation en cybersécurité.
• Évoluer dans un environnement technologique moderne axé sur Microsoft.
• Collaborer avec des experts en sécurité et en technologies.
• Accéder à des occasions de formation, de certification et de développement professionnel.
• Profiter d’une culture collaborative et de modalités de travail flexibles.
• Contribuer à des projets à forte valeur ajoutée ayant un impact durable

By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions.

EEO Notice

Vaco by Highspring is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law.

Vaco by Highspring and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco by Highspring and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact HR@vaco.com.

Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal.

Representation Notice

By submitting to this position, you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.

For residents of Ontario, Canada: Based on Highspring’s discussions with its Client, Highspring’s understanding is that this position for employment is a current vacancy (either through Highspring as a contractor or with the client directly).

Privacy Notice

Vaco by Highspring and its parents, affiliates, and subsidiaries (“we,” “our,” or “Vaco by Highspring”) respects your privacy and are committed to providing transparent notice of our policies.

• California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here.
• Virginia residents may access our state specific policies here.
• Residents of all other states may access our policies here.
• Canadian residents may access our policies in English here and in French here.
• Residents of countries governed by GDPR may access our policies here.

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring’s use of AI can be found here (https://www.highspring.com/ai-use-notices/). Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client’s use of AI products in hiring.

Pay Transparency Notice

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:

• the individual’s skill sets, experience and training;
• licensure and certification requirements;
• office location and other geographic considerations;
• other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.