Identity Access Management Consultant – Junior

Requisition: RQ00774

Client: Supply Ontario

Location: 525 University Avenue, Toronto, Ontario, Canada

Work Arrangement: Hybrid – 1 day/week onsite; onsite requirements may increase at the Hiring Manager’s discretion

Start Date: October 5, 2026

End Date: October 1, 2027

Engagement: 252 Business Days

Hours: 7.25 hours/day, 5 days/week

Role Overview

Supply Ontario is seeking a Junior Identity Access Management (IAM) Consultant to support the integration of clients with the Agency’s ONE ID Identity and Access Management service.

The ONE ID service is a secure identity solution used by the Ministry of Health and Long-Term Care and healthcare organizations across Ontario to provide secure access to patient health information and multiple digital health services through a common set of login credentials.

The successful candidate will support IAM integrations involving OIDC, OAuth, APIs, network connectivity, TLS/SSL, PKI, Single Sign-On (SSO), Oracle IAM technologies, Microsoft Active Directory, and related systems. The role requires strong technical communication, documentation, troubleshooting, and collaboration skills.

Must-Have Qualifications

- 2–3 years of Identity and Access Management (IAM) development experience
- Very positive knowledge of OpenID Connect (OIDC) and OAuth protocols
- Knowledge of system integration using standard APIs and protocols
- Knowledge of network connectivity, including firewalls and DNS
- Knowledge of software development processes
- Experience providing technical support directly to clients/customers with varying levels of technical expertise
- Knowledge of TLS/SSL and Public Key Infrastructure (PKI) in Single Sign-On (SSO) environments
- Strong ability to articulate technical issues and clearly communicate resolution options
- Ability to produce clear and concise technical documentation, including:
- Design and architecture documents
- Deployment guides
- Integration guides
- Physical application design documents

Key Responsibilities
- Work with Agency teams to support client integration with the ONE ID OIDC/OAuth service
- Provide technical support to clients during IAM integration activities
- Document the final design, installation,



configuration, and integration of each client
- Create service enrollments for client services
- Support promotion of clients from test environments into production
- Develop and execute end-to-end test plans to validate successful ONE ID integrations
- Collaborate with networking, infrastructure, and other Agency teams
- Troubleshoot integration and connectivity-related technical issues
- Provide regular project updates to project managers and sponsors
- Prepare and maintain design and implementation documentation for completed activities
- Follow applicable Agency policies, procedures, and development processes

Technical Environment The ONE ID service is based on an Oracle Identity and Access Management Suite and related enterprise technologies, including:

- Oracle Access Manager (OAM)
- Oracle Unified Directory (OUD)
- Oracle Identity Management (OIM)
- Oracle Adaptive Authentication Manager (OAAM)
- Oracle Database 19C
- Microsoft Active Directory
- Ontario Health custom systems
- OpenID Connect (OIDC)
- OAuth
- APIs and standard integration protocols

Desired / Nice-to-Have Skills
- Experience with Oracle Identity and Access Management Suite Plus
- Experience with Microsoft Active Directory Suite
- Knowledge of SAML (Security Assertion Markup Language)
- Software development experience involving IAM
- Experience with Agile development methodologies
- Experience with CI/CD pipelines
- Knowledge of JIRA and Confluence
- Public sector experience is preferred

Rated Criteria Criteria Weight 2–3 years of IAM development experience 25 Points Knowledge of OIDC/OAuth 25 Points Experience providing technical support to clients 20 Points Knowledge of system integration, APIs, protocols, firewalls, DNS, etc. 20 Points Ability to communicate effectively 10 Points Total 100 Points





Key Deliverables The Successful Consultant Will Be Responsible For Delivering

- Technical support to assist clients with integration to the Agency’s ONE ID IAM service
- Service enrollments for client services
- Client promotion from test environments to production
- End-to-end test plans validating successful ONE ID integration
- Complete design and implementation documentation for the associated integration activities

Work Arrangement & Engagement Notes
- This position is currently classified as Hybrid.
- The standard expectation is 1 day per week onsite in Toronto.
- The resource may be required to work onsite more frequently at the Hiring Manager’s sole discretion.
- The engagement is for 252 Business Days, with the possibility of an extension for unused Business Days at the Agency’s discretion.
- The resource will be required to comply with all applicable Agency policies and procedures.
- An Agency laptop will be provided.
- The resource is expected to provide at least one additional monitor, external keyboard, and mouse at their own expense.
- When working remotely, the resource must have a private office space and may not work from an open communal space.
- A hard-wired internet connection with sufficient bandwidth to support the role’s IT requirements is required.
- If the home-office requirements cannot be met, the resource will transition to full-time onsite work, and the hybrid option will no longer be available.
- Agency systems may not be accessed from outside the province of Ontario.
- Agency laptops and related equipment may not be removed from Ontario without prior written approval from the Agency.

Application Requirements Interested Candidates Should Submit The Following Mandatory Documents

- Updated Resume in Word format
- Skills Matrix / Qualification Matrix and References
- Expected Hourly Rate
- Visa Status
- LinkedIn ID

Application Deadline: Monday, August 31, 2026 at 2:00 PM EST Submit Applications To: [email protected]

Important: Applications submitted without the mandatory documents cannot be processed.

If this opportunity matches your profile, please submit your updated resume and required documents at the earliest convenience.

📌 Identity Access Management Consultant - Junior (Toronto)
🏢 S M Software Solutions
📍 Toronto