Chauffeur classe 1 -Plancher mobile

Extra Multi-Ressources; Quebec; Remote; CAD 120,000 - 160,000; Full time

Benefits offered by this job

Long-term contract through March 2028

Mostly remote with occasional visits

35-hour work week

Cloud identity & API security stack

Enterprise modernization project

Job summary

Randstad Canada is seeking a Senior IAM & API Security Developer to join a leading Canadian financial services institution undergoing a major modernization of its identity and access governance. You will architect and deliver pilot implementations, integrating OAuth 2.0, OpenID Connect, JWTs, and API gateways across distributed IT environments.

This remote-first contract runs through March 2028 with occasional visits to Montreal or Quebec City, a 35-hour work week, and a hands-on stack including

Qualifications

• Extensive hands-on background in developing and integrating enterprise IAM architectures, access controls, and authentication mechanisms.
• Deep technical command of OAuth 2.0, OpenID Connect (OIDC), JWTs, token life cycles, claims transformation, scopes, and API client security.
• Proven expertise deploying and configuring modern Identity-as-a-Service platforms (specifically Okta / Okta API Access Management).
• Practical experience building integration layers and debugging end-to-end flows across .NET APIs, API gateways, and downstream legacy systems.
• Strong experience in Infrastructure as Code (Terraform) and CI/CD pipeline automation within DevOps/DevSecOps environments.
• Working proficiency with React to develop front-end integration demos and test clients.
• Excellent autonomy, problem-solving acumen, and ability to convert functional business security requirements into concrete technical proofs-of-concept.
• Assets: Familiarity with MuleSoft/Flex Gateway, containerized environments (Kubernetes), Microsoft Entra ID, policy engines (OPA, ABAC/RBAC).
• Language proficiency: Fluent French and intermediate English.

Responsibilities

• Pilot Design & Delivery: Prototype and deliver end-to-end authorization pilot solutions, configuring access management suites, establishing mock demo clients, and overseeing end-to-end token issuance, exchange, and validation lifecycles.
• Front-End & API Integration: Build functional proof-of-concept user interfaces in React to model token enrichment and user journeys; interface authorization flows with API gateways (such as Flex Gateway or MuleSoft) and .NET back-end services handling real-time policy evaluation.
• Protocol & Token Management: Implement and test robust token patterns, including On-Behalf-Of workflows, claims augmentation, multi-claim structures, and token swapping under OAuth 2.0, OpenID Connect, and JWT frameworks.
• DevOps & Automation: Structure enterprise repositories to deliver self-service integration frameworks; automate provisioning and CI/CD pipelines leveraging Terraform and Infrastructure-as-Code principles.
• Cross-Functional Collaboration: Partner with Enterprise Architects and Product Owners to define technical roadmaps, untangle system dependencies, author technical design patterns, and provide comprehensive documentation to accelerate broad developer adoption.

Skills

IAM architectures

OAuth 2.0

OIDC

JWTs

API security

Okta API Access Management

Terraform

CI/CD pipelines

React

MuleSoft

Tools

Okta API Access Management

Flex Gateway

MuleSoft

Kubernetes

OPA/ABAC/RBAC

Job description

Our client, a prominent Canadian institutional leader in the financial services and insurance sector, is actively transforming and modernizing its enterprise security architecture. As part of a major strategic initiative to overhaul access governance, they are seeking a Senior IAM & API Security Developer to play a pivotal role in the modernization of their identity, credentialing, and access authorization ecosystem.

In this role, you will be instrumental in architecting and delivering pilot implementations that showcase automated, self-service access authorization across distributed IT environments. You will bridge modern identity protocols with enterprise microservices, building scalable, automated pipelines that empower internal development teams to consume advanced authorization services seamlessly.

Advantages

• Long-Term Engagement: Stable multi-year contract opportunity running through March 2028.
• Flexible Work Arrangement: Primarily remote model with very occasional team touchpoints in Montreal or Quebec City.
• Balanced Workweek: Standard 35-hour work schedule promoting a healthy work-life balance.
• Cutting-Edge Stack: Hands-on exposure to cloud identity, automated access control, Infrastructure as Code, and modern API security.
• Impactful Mission: Drive large-scale enterprise modernization in an organization placing digital trust and cybersecurity at the core of its business.

Responsibilities

• Pilot Design & Delivery: Prototype and deliver end-to-end authorization pilot solutions, configuring access management suites, establishing mock demo clients, and overseeing end-to-end token issuance, exchange, and validation lifecycles.
• Front-End & API Integration: Build functional proof-of-concept user interfaces in React to model token enrichment and user journeys; interface authorization flows with API gateways (such as Flex Gateway or MuleSoft) and .NET back-end services handling real-time policy evaluation.
• Protocol & Token Management: Implement and test robust token patterns, including On-Behalf-Of workflows, claims augmentation, multi-claim structures, and token swapping under OAuth 2.0, OpenID Connect, and JWT frameworks.
• DevOps & Automation: Structure enterprise repositories to deliver self-service integration frameworks; automate provisioning and CI/CD pipelines leveraging Terraform and Infrastructure-as-Code principles.
• Cross-Functional Collaboration: Partner with Enterprise Architects and Product Owners to define technical roadmaps, untangle system dependencies, author technical design patterns, and provide comprehensive documentation to accelerate broad developer adoption.

Qualifications

• Extensive hands-on background in developing and integrating enterprise Identity and Access Management (IAM) architectures, access controls, and authentication mechanisms.
• Deep technical command of OAuth 2.0, OpenID Connect (OIDC), JWTs, token life cycles, claims transformation, scopes, and API client security.
• Proven expertise deploying and configuring modern Identity-as-a-Service platforms (specifically Okta / Okta API Access Management).
• Practical experience building integration layers and debugging end-to-end flows across .NET APIs, API gateways, and downstream legacy systems.
• Strong experience in Infrastructure as Code (Terraform) and CI/CD pipeline automation within DevOps/DevSecOps environments.
• Working proficiency with React to develop front-end integration demos and test clients.
• Excellent autonomy, problem-solving acumen, and ability to convert functional business security requirements into concrete technical proofs-of-concept.
• Assets: Familiarity with MuleSoft/Flex Gateway, containerized environments (Kubernetes), Microsoft Entra ID, policy engines (OPA, ABAC/RBAC), Salesforce integrations, or legacy gateway migrations (e.g., Layer7).
• Language proficiency: Fluent French and intermediate English.

Summary

• Role Type: Full-time contractual mandate (35 hours/week)
• Contract Duration: November 2026 to March 31, 2028 (Multi-year)
• Location: Remote / Hybrid (occasional visits to offices in Montreal or Quebec City)
• Compensation: Competitive, aligned with market rates and candidate expertise

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [e-mail] to ensure their ability to fully participate in the interview process.