Job Summary

We are seeking an experienced IAM Architect to lead enterprise-wide Identity and Access Management architecture, strategy, and modernization initiatives.

The ideal candidate will bring extensive experience in Active Directory, Microsoft Entra ID (Azure AD), and enterprise Identity Governance & Administration (IGA) platforms, with the ability to design secure, scalable, and compliant identity solutions across hybrid and cloud environments.

This role requires a combination of strategic architectural leadership, deep technical expertise, and the ability to guide engineering teams and collaborate with cross-functional stakeholders.

Key Responsibilities

- Own and define enterprise IAM architecture, technical standards, and long-term identity roadmaps.
- Lead Active Directory modernization, including forest, domain, Group Policy, DNS, and security architecture.
- Design and manage Microsoft Entra ID solutions, including Conditional Access, MFA, PIM, Identity Protection, and passwordless authentication.
- Architect hybrid identity solutions using Entra Connect, Cloud Sync, federation, and seamless SSO.
- Lead enterprise IGA architecture and integrations, preferably using Saviynt or SailPoint.
- Design identity lifecycle management processes, including Joiner-Mover-Leaver (JML), automated provisioning, and deprovisioning.
- Establish RBAC, segregation of duties (SoD), access certification, and identity governance policies.
- Develop SSO and application integration standards using SAML, OAuth 2.0, OIDC, and SCIM.
- Drive identity automation using PowerShell, Microsoft Graph API, and infrastructure-as-code.
- Oversee privileged access governance, Zero Trust security, compliance, and identity-related audit requirements.




- Manage Microsoft 365 and Entra ID licensing strategies, optimization, and reporting.
- Provide technical leadership, mentor IAM engineers, and collaborate with security, HR, infrastructure, audit, and application teams.

Required Qualifications & Technical Skills

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
- 10+ years of professional experience in Identity and Access Management.
- Recent experience in an IAM Architect, Identity Architect, or senior IAM technical leadership role.
- Extensive hands-on expertise in Active Directory architecture, administration, security hardening, and modernization.
- Strong experience with Microsoft Entra ID (Azure AD), Conditional Access, MFA, PIM, and Identity Protection.
- Proven experience designing and implementing enterprise IGA platforms.
- Strong understanding of Saviynt, SailPoint, or equivalent identity governance solutions.
- Experience with hybrid identity architecture, Entra Connect, Cloud Sync, and federation.
- Expertise in identity lifecycle management, RBAC, SoD, access reviews, and HR-driven provisioning.
- Advanced PowerShell scripting and Microsoft Graph API experience.
- Solid understanding of SAML, OIDC, OAuth 2.0, SCIM, Kerberos, and LDAP.
- Knowledge of Zero Trust, privileged access management, and enterprise security architecture.





Preferred Qualifications

- Direct enterprise-level Saviynt implementation and architecture experience.
- Microsoft 365 and Entra ID licensing expertise (E3/E5, P1/P2, and Entra ID Governance).
- Experience with Terraform and infrastructure-as-code.
- Microsoft Certified: Identity and Access Administrator Associate (SC-300).
- CISSP or equivalent cybersecurity certification.
- Experience in regulated enterprise environments, including financial services, utilities, healthcare, or government.
- Familiarity with AI-driven identity automation and workload identity governance.

Leadership & Professional Competencies

- Strong enterprise architecture and strategic decision-making capabilities.
- Excellent stakeholder management and cross-functional collaboration.
- Ability to mentor technical teams and influence senior stakeholders.
- Strong analytical, problem-solving, and root-cause analysis skills.
- Excellent communication and architecture documentation abilities.
- Ownership, accountability, and commitment to continuous improvement.

Employment Details

- Job Type: Permanent, Full-Time
- Experience Level: Senior / Enterprise Architecture
- Experience Required: 10+ Years

How to Apply

Interested candidates who meet the above qualifications are encouraged to apply.

Please share your updated resume at:

Email: [email protected]
Contact: +1 (403)-306-0324

Subject Line: Application – IAM Architect

Pay: $87,500.00-$140,000.00 per year

Ability to commute/relocate:

- Toronto, ON: reliably commute or plan to relocate before starting work (preferred)

Location:

- Toronto, ON (required)

Work Location: Hybrid remote in Toronto, ON (Toronto District)

📌 IAM Architect – Active Directory & Microsoft Entra ID (Toronto)
🏢 BQ INTERNATIONAL
📍 Toronto