Job Description - Lead Engineer, Identity Governance and Administration - IAM (2600199)Lead Engineer, Identity Governance and Administration - IAM - 2600199At Raymond James,wedevelop,wecollaborate,wedecide,wedeliver, andweimprove togetherRaymond James Ltd. is Canada’s leading independent investment dealers offering high quality investment products and services to Canadians seeking customized solutions to their wealth management needs.Lead Engineer, Identity Governance and Administration - IAMHow does the role impact the organization?Raymond James Ltd. (Canada) is embarking on a multi-year digital transformation to migrate its core back-office, advisor, and client platforms to a modernized SaaS wealth management solution.To support this initiative, we are hiring a Senior-Lead Engineer – Identity & Access Management (IAM/IGA) to champion enterprise IAM standards in Canada and join our global IAM team.This is a high-impact hands‑on role that blends architecture, engineering, governance, and enterprise alignment in a large‑scale platform modernization program.What will your role be responsible for?Serve as the Canadian IAM technical lead for the wealth platform transformation program.Partner with Enterprise IAM teams to align Raymond James Canada to global IAM and IGA standards.Act as primary liaison between Raymond James Canada Technology, Enterprise IAM Engineering, and FNZ solution architecture teams.Lead design and implementation of:Enterprise SSO (OIDC, OAuth2.0, SAML) & Customer Identity (CIAM) SolutionsIdentity Governance & Administration (IGA) integrationsFederation and token lifecycle managementRole‑based access and entitlement modelsAccess certification and attestation controlsDefine and implement joiner/mover/leaver workflows and automated provisioning/de‑provisioning processes.Oversee authentication architecture across:FNZ SaaS platformAdvisor applications (front/middle/back office)Client web and mobile applicationsThird‑party vendor integrationsEnsure IAM logging, monitoring, and audit evidence meet regulatory and compliance requirements.Participate in Disaster Recovery (DR) planning and IAM failover testing.Provide architecture documentation, integration guidance, and technical leadership across business and technology stakeholders.What can you expect from us?Our most important investment is in people. Upon eligibility, Raymond James Ltd offersflexible workstyles,a competitive compensation and benefits package. Our benefits range from Health Benefits, RRSP Matching Program, Employee Stock Purchase Plan, Paid Time Off, Volunteer Days, Discretionary Bonuses, Tuition Reimbursement and many more! We also support internal promotion and community involvement.What do we expect from you?Required Technical skillsets:10+ years of experience in Identity & Access Management engineering.8+ years of experience in a senior or lead technical IAM engineering role.Strong expertise in:Enterprise federation, SSO and CIAM orchestration platforms (e.G. Ping DaVinci, PingOne, API‑first frameworks)OpenID Connect, SAML, and token lifecycle management.Mobile authentication (Passkeys, biometric enrollment, push MFA), secure SDKs, and PKIIGA platforms (e.G., SailPoint, Saviynt, or equivalent)Active Directory and Microsoft Entra ID in hybrid identity environmentsRole hierarchy and entitlement modelingAccess provisioning, de‑provisioning, and certification frameworksAPI security authentication and token managementExperience delivering IAM solutions in hybrid (on‑prem + cloud + SaaS) environments.Financial Services industry experience preferred.Additional Notes:Strong preference for candidates located in or able to work from the RJ Vancouver office.Must demonstrate solid communication, stakeholder engagement,
and cross‑border collaboration skills.Experience working within large, multi‑vendor enterprise programs is highly desirableEducation:Minimum of a Bachelor’s degree in Computer Science, MIS or related degree is required.Prefer candidates with one or more certificates in relevant technologies. (e.G., CISSP, CISM, Microsoft Identity certifications, IGA platform certifications).Salary Range:$180,000-200,000 annually, in addition to competitive performance bonuses/incentives.Actual compensation will be determined based on skills, experience, internal equity, and other job requirements.This posting is for an existing vacancy.At Raymond James – we honor, value, respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic self, our organization, clients and communities thrive, it is part of our people‑first culture. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.Here at Raymond James we demonstrate our commitment to ensuring equal opportunities for all candidates. To request accommodations, candidates are instructed to contact Human Resources via email at
[email protected]. By reaching out to this email address, candidates can communicate their specific requirements and discuss the necessary accommodations they may need to participate fully in the recruitment process.We may use automated or AI‑enabled tools to support parts of our recruitment and screening process, including screening, assessing or selecting applicants where applicable. These tools help us review applications efficiently, but they do not replace human decision‑making.#J-18808-Ljbffr
📌 Lead Engineer, Identity Governance And Administration - Iam - $180,000 - $200,000 A Year (Toronto)
🏢 Raymond James
📍 Toronto