At Avanade, cybersecurity consultants are innovators, and challengers of the status quo. If you’re an experienced Digital Identity Specialist, who can help our clients solve complex challenges, this might be the perfect opportunity for you.
In a client‑facing consulting role, you will work on exciting projects that transform our client’s solutions with a focus on the Microsoft Digital Identity capabilities as well as other leading market vendors (Saviynt & One Identity). As a member of our security practice, you will work for both Avanade and Accenture clients, ranging from medium to large global enterprise clients. Join a curious and diverse team that’s passionate about next‑gen tech and establish yourself as a Leader in the Digital Identity space.
Key Accountabilities Develop and implement modern authentication solutions (OAuth, SAML, token‑based authentication, claims transformations).
Manage identities and authentication services using Microsoft EntraID, including SSO, Conditional Access, MFA, PIM, and authentication methods.
Enhance and secure Active Directory environments, including AD tiered models, GPOs, DNS, PKI/Certification Authority, and AD recovery.
Manage IAM lifecycle processes (provisioning, deprovisioning, JML, IGA).
Configure and maintain EntraID Hybrid Sync and application provisioning (SCIM, custom attributes).
Develop and implement External Identity solutions including Customer Identity and Access Management (CIAM).
Troubleshoot and resolve complex IAM issues across AD, EntraID, and authentication flows.
Lead or contribute to solution design and delivery for identity projects.
Collaborate with cross‑functional teams and stakeholders in an agile setting.
Support privileged access management and secrets management initiatives.




Job Qualifications 7+ years’ experience in Identity and Access Management (IAM), with a strong focus on Microsoft EntraID (AzureAD). Experienced in consulting and advisory discussions with clients and other consulting firms.
SC‑300 - Microsoft Certified: Identity and Access Administrator Associate. Proven understanding of Active Directory and legacy authentication protocols (LDAP, Kerberos, NTLM, etc.), EntraID Sync. Demonstrated expertise with EntraID and EntraID Domain Services, including relevant use cases. Skilled in managing identities, setting up conditional access, implementing multi‑factor authentication, configuring global secure access (Entra Internet Access & Private Access), and overseeing identity governance with Microsoft EntraID. Experience with modern authentication protocols and integrating applications using those protocols.
Experience leading small to medium project general design and delivery (solution architecture and associated infrastructure or business and functional requirements). Understanding of the business, privacy, security, and compliance challenges surrounding Digital Identities and a passion for solving these challenges for clients.
Experience with privileged access management solutions and an understanding of secrets management. Nice to have: Experience with additional IAM platforms such as Auth0, Ping Identity, or ForgeRock. Scripting and automation capabilities using Python, PowerShell, or similar languages to extend IAM functionality.
Compensation and Location Compensation at Avanade varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. The base pay range for this role is $114,400 to $135,850, based on full‑time employment, for roles located in British Columbia/Ontario.

#J-18808-Ljbffr

📌 Associate Manager, Digital Identity (Ontario)
🏢 1205 Avanade Canada Inc.
📍 Ontario