Apply on Kit Job: kitjob.ca/job/2fsnqi

Leverage your career within the greatest Identity Security Community

#Champion Identity and Access Management

Join our team as an IAM Architect – PingOne Advanced Identity Cloud — flexibly remotely from within Canada.

iC Consult is a global Identity Security consultancy and a true People Business: a close-knit community of Identity Security enthusiasts who combine agility, direct impact, and strong leadership with global delivery excellence – jointly optimizing people desirability, technology feasibility, and sustainable business viability. Within this environment, you will work in a local team setup that is part of our multimatrix organization – meaning your local team, your project team, and your reporting line may differ, giving you broad exposure, flexibility, and diverse collaboration opportunities.

We are seeking a highly experienced IAM Architect with deep expertise in Ping Identity’s PingOne Advanced Identity Cloud (ForgeRock platform) to design and deliver modern identity solutions. This role focuses on identity lifecycle management, access governance integration, and scalable authentication architectures for enterprise and customer identity environments.

The architect will lead the design and implementation of identity lifecycle, authentication, authorization, and governance integrations, ensuring solutions align with security, compliance, and Zero Trust principles.

Your Responsibilities

- Design and lead enterprise IAM architectures based on PingOne Advanced Identity Cloud (ForgeRock), supporting workforce, partner, and customer identity use cases.
- Architect and implement solutions using ForgeRock AM, IDM, DS, authentication trees,



and modern identity standards (OAuth2, OpenID Connect, SAML).
- Design and optimize identity lifecycle processes (Joiner–Mover–Leaver), automated provisioning, and integrations with enterprise systems and IGA platforms (e.g., SailPoint, Saviynt).
- Define secure, scalable identity architectures aligned with Zero Trust principles, adaptive authentication, and regulatory compliance.
- Provide technical leadership and architectural guidance, leading design reviews, workshops, and mentoring IAM engineers.

Your Experience

- 8–12+ years of experience in Identity & Access Management (IAM) with solid hands‑on expertise in PingOne Advanced Identity Cloud / ForgeRock.
- Deep knowledge of ForgeRock AM, IDM, Directory Services, authentication trees/identity journeys, and modern identity protocols (OAuth2, OpenID Connect, SAML).
- Experience designing enterprise‑scale IAM architectures, identity lifecycle management (LCM), provisioning, and integrations with IGA platforms such as SailPoint, Saviynt, or One Identity.
- Strong understanding of identity data architecture, directory services, and authoritative source integrations.
- Experience with Zero Trust architectures, adaptive authentication, and highly available identity infrastructures; CIAM or IAM platform migration experience is a plus.

What we offer





- Enjoy PTO base plan of 16 days a year (employees may be eligible for additional PTO based on tenure) plus floating holidays totaling 12 holidays per year
- A comprehensive 100% employer-sponsored extended healthcare coverage, including medical, dental, vision, virtual health, and life and disability insurance
- Receive a monthly cell phone reimbursement of $54
- Join iC Consult University– our comprehensive onboarding program to accompany you on your individual induction path with training modules, mentoring programs and events
- Take advantage of personal coaching offerings
- Regular team and company events in a relaxed atmosphere to strengthen our corporate culture
- A workplace with flat hierarchies, short decision‑making paths, and a high degree of personal responsibility, providing substantial decision‑making freedom

Central Office

161 Bay Street 27th Floor

Toronto, ON M5J2S1

Canada

Apply now and become part of our team!

If you have any questions, we’re always here for you and look forward to getting in touch. Please send us your application documents (CV, certificates, salary expectations, and possible start date) to

Diversity matters to us.

We welcome applications regardless of gender, age, origin, religion or belief, disability, sexual identity, or any other characteristic protected by law. All hiring decisions are based solely on qualifications and suitability.

For more information, visit:

The protection of your data is important to us. You can find all information on how we handle your data in our privacy policy.

#J-18808-Ljbffr

Apply on Kit Job: kitjob.ca/job/2fsnqi

📌 IAM Architect – PingOne Advanced Identity Cloud / ForgeRock (Toronto)
🏢 iC Consult
📍 Toronto