Job Title: IAM Engineer (Identity & Access Management) Location: Toronto, ON Work Model: Hybrid (3 Days/Week Onsite) Employment Type: Full-Time FTE Job Summary: We are seeking an experienced IAM Engineer to design, implement, and support enterprise Identity and Access Management (IAM) solutions.

The ideal candidate will have hands-on experience with modern IAM platforms, authentication protocols, privileged access management, and cloud identity services in large-scale enterprise environments.

Required Skills & Experience 5+ years of experience in Identity & Access Management (IAM), Cybersecurity, or Infrastructure Security.

Solid understanding of IAM security principles, including Least Privilege, Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) .

Hands-on experience with one or more IAM platforms: Microsoft Entra ID (Azure AD) Okta Ping Identity Sail

Point Forge

Rock Cyber

Ark Strong knowledge of authentication and identity protocols: Single Sign-On (SSO) Multi-Factor Authentication (MFA)



SAML OAuth 2.0 OpenID Connect (OIDC) Experience with Privileged Access Management (PAM) solutions.

Working knowledge of Active Directory (AD), LDAP, and Directory Synchronization .

Experience managing Cloud Identity and Access Management across Microsoft Azure, AWS, and/or Google Cloud Platform (GCP) .

Experience implementing IAM integrations, identity lifecycle management, and access governance.

Proven experience supporting enterprise-scale environments.

Preferred Certifications Microsoft Certified: Identity and Access Administrator Associate (SC-300) Certified Identity and Access Manager (CIAM) CISSP CISM CompTIA Security+ (Nice to Have) Preferred Qualifications Strong analytical and troubleshooting skills.

Excellent communication and stakeholder management abilities.

Experience working in regulated enterprise environments is an advantage.

📌 IAM Engineer || Toronto, ON - Hybrid || Fulltime FTE
🏢 AceStack
📍 Toronto