Application Development - Senior IAM Systems Engineer - Advanced

Ian Martin Group; Toronto; Hybrid; CAD 177,000 - 209,000; Full time

Job summary

Ian Martin Group in Toronto, ON is seeking a Senior IAM Systems Engineer to lead the full lifecycle of authentication-service implementations, from business handoff through installation, configuration, development, testing, deployment and production support, in a hybrid work arrangement.

The role requires hands-on experience with RSA SecurID, RSA Authentication Manager, and RSA Cloud Authentication Service, plus knowledge of SAML, OAuth 2.0, OpenID Connect, MFA and SSO, across Windows and

Qualifications

• 3-5 years hands-on IAM or authentication engineering experience.
• Strong experience installing, configuring, integrating, developing, and supporting RSA Authentication Manager and RSA Cloud Authentication Service.
• Experience with authentication and federation technologies: SAML, OAuth 2.0, OpenID Connect, MFA, SSO.
• Working knowledge of AD/Entra ID/Azure AD, WS-Federation/WS-Trust, XML/SOAP, Kerberos, Linux/UNIX, TLS, and Group Policy Objects.

Responsibilities

• Lead the full lifecycle of authentication-service implementations from handoff to production support.
• Serve as SME on RSA SecurID, RSA Authentication Manager, and RSA Cloud Authentication Service.
• Provide guidance on performance, reliability, security, and operational readiness.
• Configure, integrate, and troubleshoot RSA authentication platforms across enterprise environments.
• Collaborate with stakeholders to define deliverables and drive IAM initiatives.

Skills

IAM

RSA SecurID

RSA Authentication Manager

RSA Cloud Authentication Service

SAML

OAuth 2.0

OpenID Connect

MFA

SSO

Active Directory / Azure AD

Windows / UNIX/Linux

TLS / PKI

XML / SOAP

Tools

RSA SecurID

RSA Authentication Manager

RSA Cloud Authentication Service

Job description

Application Development - Senior IAM Systems Engineer - Advanced

• Location: Toronto, ON - Hybrid (4 days a week)
• Pay Rate: $85.22/hr - $100.66/hr
• Contract Length: 12 Months with possibility for extension

Responsibilities

• Lead the full lifecycle of authentication-service implementations, from business and project handoff through installation, configuration, development, testing, deployment, and production support.
• Serve as a subject matter expert on RSA SecurID, RSA Authentication Manager, and RSA Cloud Authentication Service, including their architecture, tools, and integrations.
• Provide technical guidance on performance, scalability, reliability, security, and operational readiness.
• Participate in architecture, design, and technology discussions for new solutions and enhancements.
• Configure, customize, integrate, and troubleshoot RSA authentication platforms across enterprise environments.
• Identify opportunities to improve efficiency through automation, standardization, and engineering best practices.
• Establish strong working relationships across business units, technology teams, and platform groups.
• Collaborate with stakeholders to define deliverables and ensure IAM initiatives are effectively integrated into Client procedures, standards, and processes.
• Support incident resolution, root-cause analysis, risk remediation, and continuous improvement of authentication services.
• Contribute to technical documentation, implementation standards, and operational procedures.

Must haves

• 3-5 years of hands-on IAM or authentication engineering experience.
• Strong experience installing, configuring, integrating, developing, and supporting RSA Authentication Manager and RSA Cloud Authentication Service.
• Experience with authentication and federation technologies, including:
• SAML
• OAuth 2.0
• OpenID Connect
• Multi-factor authentication
• Single sign-on
• Working knowledge of several of the following:
• Microsoft Active Directory
• Microsoft Entra ID / Azure AD
• WS-Federation and WS-Trust
• XML and SOAP
• Kerberos
• Linux/UNIX
• TLS
• Group Policy Objects
• Knowledge of network security, authentication, authorization, and identity lifecycle concepts.
• Experience deploying enterprise software and troubleshooting complex technical issues across Windows and UNIX/Linux platforms.
• Strong analytical, problem-solving, communication, and collaboration skills.
• Ability to manage multiple priorities and work effectively across technical and business teams.

Nice-to-have

• Experience designing, developing, and tuning highly scalable authentication or security systems.
• Experience with cloud security, identity security, or modern authentication architectures.
• Knowledge of privileged access management, authorization engines, or policy-based access control.
• Experience with automation, scripting, infrastructure as code, or DevOps practices.
• Strategic thinking and the ability to influence decisions across functions and business areas.
• Relevant security or IAM certifications, such as CISSP, CISM, or vendor-specific RSA certifications.
• Microsoft Active Directory
• Microsoft Entra ID / Azure AD
• WS-Federation and WS-Trust
• XML and SOAP
• Kerberos
• Linux/UNIX
• TLS
• Group Policy Objects

Soft Skills

• Strong analytical, problem-solving, communication, and collaboration skills.
• Ability to manage multiple priorities and work effectively across technical and business teams.

Looking for meaningful work? We can help!

Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/