We are seeking a highly skilled and experienced Lead IAM Engineer to design, implement, administer, optimize, and support complex enterprise identity infrastructure across on‑premises and cloud environments. The role focuses on Microsoft Active Directory, Microsoft Entra ID, Entra ID Connect, identity federation, and multi‑factor authentication.

Administer and support Entra ID, hybrid identity solutions, and Entra ID Connect—including sync configuration, health monitoring, and troubleshooting.

Contribute to roadmap planning for IAM and directory services modernization.

Implement identity security best practices for Active Directory and hybrid identity environments, including hardening, least privilege, privileged access controls, and secure administrative models.

Serve as a senior escalation point for complex directory services, federation, and authentication issues; troubleshoot issues involving AD replication, Kerberos/NTLM authentication, DNS, Group Policy, ADFS claims and trusts, Entra ID Connect synchronization, Federation and MFA failures.

Perform root cause analysis and implement long‑term corrective actions.

Create and maintain technical documentation, engineering standards, runbooks, and design artifacts.

Support operational maturity through process improvement and standardization.

Provide technical guidance to junior engineers and operations team.





Participate in project planning, implementation, and change management activities.

Support acquisitions, divestitures, or business transformations involving identity integration and migration.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent work experience.

- 10+ years of hands‑on experience in engineering and administration of Microsoft Active Directory in large enterprise environments.
- Strong experience with multi‑domain and multi‑forest AD environments, DNS, Group Policy, replication, trusts, and authentication protocols.
- Solid problem‑solving, troubleshooting, and root cause analysis skills.
- Security risks are reduced through improved configuration, hardening, and access controls.

The engineer serves as a trusted technical expert and strategic partner across IAM and infrastructure initiatives.

Hybrid work model: flexible 2–3 days per week in office with the option to work from anywhere up to 8 weeks per year.

Competitive benefits package including vacation, mental health days, access to Headspace, retirement savings, and tuition reimbursement.

We are an Equal Employment Opportunity Employer and provide reasonable accommodations for qualified individuals with disabilities in accordance with applicable law.

#

📌 LEAD DEVELOPPEUR IT F/H (Toronto)
🏢 Reuters
📍 Toronto