Assignment: RQ00774 - Identity Access Management Consultant - Junior Requisition: RQ00774 Job Title: Junior Identity Access Management Consultant for ONEID Client: Ontario Health Start Date: 2026-10-05 End Date: 2027-10-01 Department: Digital Excellence in Health Office Location: 525 University Avenue, Toronto Business Days: 252.00 Location: 1 day/week onsite Public Sector Experience: Preferred Must Haves: 2 to 3 years of IAM (Identity and Access Management) development experience Very good knowledge of Open ID Connect (OIDC) and OAuth protocols Knowledge of system integration based on standard interfaces (API''s) and protocols Description The Agency''s ONEID service is a secure identity solution leveraged by the Ministry of Health and Long-Term Care and numerous health care organizations in Ontario for purposes of accessing patient health information (PHI).

The ONEID service enhances protection of PHI and user account information through privacy and security safeguards while providing access to multiple digital health services using the same login credentials.

The ONE ID service is based on Oracle 12C Identity Access Management suite including Oracle Access Manager (OAM), Oracle Unified Directory (OUD), Oracle Identity Management (OIM), Oracle Adaptive Authentication Manager (OAAM), Oracle 19C database, Microsoft Active Directory, and other Ontario Health custom systems.

As such, Ontario Health requires Oracle Access Manager (OAM) and Oracle Unified Directory (OUD) experts with Openshift experience to migrate the systems to AWS.

Required Skills: 2 to 3 years of IAM (Identity and Access Management) development experience Very good knowledge of Open ID Connect (OIDC) and OAuth protocols Knowledge of system integration based on standard interfaces (API''s)



and protocols Knowledge of network connectivity including firewalls and DNS Knowledge of development processes Experience in providing technical support directly to clients/customers of various technical depths Knowledge of TLS/SSL and Public key Infrastructure (PKI) on Single Sign-On (SSO).

Able to articulate technical issues and provide options to resolve them clearly and concisely.

Able to produce transparent and concise documentation including design/architecture documents, deployment and integration guides, and physical application design documents.

Responsibilities: Work with the Agency teams in client integration to ONE ID OIDC/OAuth service Document the final design, installation, configuration, and integration of each client Work collaboratively with other Agency teams such as networking, and infrastructure.

Provide updates to project managers and sponsors Desired Skills: Experience with Oracle and Identity and Access Management Suite Plus and Microsoft Active Directory Suite Knowledge of SAML (Security Assertion Markup Language) is an asset Software experience with IAM is an asset Experience in working with Agile development and CI/CD pipelines for software development Knowledge of JIRA and Confluence Rated Criteria:



100 Points 2 to 3 years of IAM development experience 25 Points Knowledge in OIDC/OAuth 25 Points Experience in providing technical support to clients 20 Points Knowledge of system integration (API''s, protocols, firewalls, DNS, etc.) 20 Points Ability to communicate effectively 10 Points Deliverables: Provide technical support to assist clients to integrate to the Agency''s ONE ID IAM service Create service enrollments for client services Promote clients from test environments to production End-to-end test plan to ensure the integration to ONE ID is successful All design and implementation documents for the above tasks Additional Terms The term of this Engagement Assignment is for 252 Business Days.

The Engagement Assignment may be extended for unused Business Days at the Agency''s discretion.

The resource will comply with the Agency''s policies and procedures.

The resource will be issued an Agency laptop and is expected to provide at least one additional monitor, an external keyboard and a mouse at their own expense.

In addition, when the resource is working from their home location they must have a private office space and are not permitted to work in an open communal space.

Internet connection must be hard-wired and suitable bandwidth to support the IT requirements of this role.

If these conditions cannot be met within their home office space, the resource will transition to full time in office, and the hybrid option will no longer be available.

The Agency systems cannot be accessed from outside the province of Ontario, and Agency assets including laptops and related equipment cannot be removed from the province of Ontario, without prior written approval from the Agency.

Assignment Type: This position is currently listed as ''Hybrid''.

The resource under this request will be required to work onsite as per Hiring Manager sole discretion.

📌 Junior Identity Access Management Consultant for ONEID (Toronto)
🏢 Cleo Consulting
📍 Toronto