11740

Maarut; Montreal; On-site; CAD 110,000 - 150,000; Full time

Job summary

Maarut is seeking a Senior Integration Solution Architect in Montreal to lead the modernization and migration of an authentication platform across multiple applications. You will own the design, strategy, and collaboration with security, development, and operations teams.

The role requires expertise in OAuth 2.0, OIDC, SAML 2.0 and identity federation, with hands-on delivery of architecture documents and migration roadmaps.

Qualifications

• Experience leading modernization or migration of authentication platforms across multiple applications.
• Proficiency with OAuth 2.0, OIDC and SAML 2.0 at design level.
• Ability to produce architecture documents and migration strategies.
• Experience in Agile, cross-functional environments.
• Coordinate work across business, architecture, security, development and operations teams.

Responsibilities

• Define migration strategies and transition plans for authentication platforms.
• Produce architecture documents, impact analyses and migration roadmaps.
• Lead cross-functional teams across business, security, and IT stakeholders.

Skills

IAM modernization

OAuth 2.0

OIDC

SAML 2.0

Leadership

Cross-functional collaboration

Communication

Tools

Auth0

Identity federation

MFA

JWT

Encryption

Job description

Senior Integration Solution Architect (ASI)

• Job Opening ID 11740
• City Montreal
• Country Canada
• Number of Positions 1
• Work Experience 7-10 Years

Job Description

Mandate Overview:

• The program is looking for an integration architect who willown the migration of Wealth Management authentication to Auth0/SAMD, fromtarget architecture definition through supporting development teams duringimplementation. The role is cross-functional: it aligns GP solutions withcorporate identity management foundations and coordinates the Conquest, Mako,Hybrid Offer and Unique Identifier projects. Deliverables are concrete anddocumented: architecture decision records, impact analyses, integration mapping,client migration and decommissioning strategies. The advisory role withdelivery, security and enterprise architecture teams carries as much weight astechnical design. The experience threshold differs between the title received(8+ years) and the mandate description (10+ years), a point submitted to theclient.
• Target candidate: a solution or integration architectwho has already led the modernization or migration of an authenticationplatform (Auth0 or another identity federation solution) across multipleapplications, with OAuth 2.0, OIDC and SAML 2.0 mastered at design level. Theyproduce the architecture documents and migration strategies themselves, and canbring business, security, development and operations teams to alignment.

Requirements

Required:

• Authentication and identity and access management (IAM)ecosystem modernization projects
• Integration of modern authentication platforms, such asAuth0 and other identity federation solutions
• Protocols and standards: OAuth 2.0, OIDC, SAML 2.0 and SSO
• Design and implementation of complex integration solutionsin distributed, multi-system environments
• Migration strategies and transition of legacy systems tomodern architectures
• Production of solution architectures, impact analyses,migration strategies and architecture documents
• Security, data protection and digital access managementissues
• Agile, multidisciplinary environments involving multipledelivery teams
• Coordination of work across business, architecture,security, development and operations teams
• Analysis, problem solving and decision making in complexcontexts
• Communication, simplification and influential leadership

Preferred:

• IAM: Auth0, SAMD, MFA, SSO, identity federation
• JWT, certificate and encryption mechanisms (in addition torequired protocols)
• Digital modernization environments: authentication,security, integration in complex ecosystems

Asset:

• Major asset: Wealth Management environments and Client’sdigital modernization initiatives
• Major asset: Conquest, Mako, SmartD, Market-Q platforms
• Financial sector or highly regulated environments

Profiles to Exclude:

• Solution architect profile whose IAM experience is limitedto consuming an existing SSO, with no authentication platform modernization ormigration project.
• IAM administrator or operator profile (provisioning, accountmanagement, console configuration) with no demonstrated target architecturedesign responsibility.
• Security architect profile focused on compliance, governanceor risk management, with no application integration deliverable.
• Developer or tech lead profile who integrated OAuth or OIDCinto a single application, with no architecture mandate spanning multipleapplications or client bases.
• Enterprise architect profile focused on mapping andstrategy, with no solution architecture document produced for animplementation.
• Profile with no demonstrated legacy-to-modern architecturemigration project.