Position: IAM Engineer

Location: Onsite- Toronto, ON

Job type: Full time/Permanent Hiring

We are seeking an Identity & Access Management (IAM) Engineer with robust experience designing, implementing, and supporting enterprise IAM solutions. The ideal candidate will have hands-on expertise with Azure AD (Entra ID), Okta, Ping Identity, SailPoint, ForgeRock, or CyberArk , along with experience in SSO, MFA, Identity Federation, PAM, and cloud IAM across enterprise settings.

Key Responsibilities
Design, implement, and support enterprise Identity & Access Management (IAM) solutions, ensuring secure authentication, authorization, and access governance.
Configure and manage SSO, MFA, Identity Federation (SAML, OAuth 2.0, OpenID Connect) and Privileged Access Management (PAM) solutions across enterprise applications.
Integrate IAM platforms with Active Directory, LDAP, cloud services (Azure, AWS, GCP), and enterprise applications , ensuring secure identity lifecycle management.
Implement access governance, RBAC, ABAC,



least privilege , provisioning/de-provisioning, and directory synchronization following security best practices.
Collaborate with security, infrastructure, and application teams to support IAM integrations, troubleshoot authentication issues, and strengthen enterprise security posture.
Support IAM operations, audits, compliance initiatives, and continuous improvements across large-scale enterprise environments.

Required Skills (Must Have)
Identity & Access Management (IAM)
Azure AD / Microsoft Entra ID
Okta / Ping Identity / SailPoint / ForgeRock / CyberArk (any combination)
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Identity Federation
SAML
OAuth 2.0
OpenID Connect (OIDC)
Privileged Access Management (PAM)
Active Directory (AD)
LDAP
RBAC / ABAC
Access Governance
Azure / AWS / GCP IAM

📌 Identity & Access Management Iam Engineer Toronto (Canada)
🏢 Ku0026K Global Talent Solutions
📍 Canada