DevSecOps Developer / CIAM Architect — Public Transit (Montreal)

Abbeal SAS; Montreal (administrative region); On-site; CAD 130,000 - 210,000; Full time

Job summary

Abbeal SAS in Montreal is seeking a senior DevSecOps Developer / CIAM Architect to design, integrate and operate a CIAM platform for transit riders and partners. You will own deployment automation, security controls and identity services across front-end, API and backend layers.

Applicants should bring 10-15 years in IT with proven DevSecOps/SRE practice, experience with Ping Identity, Keycloak, Okta or Auth0, and strong knowledge of OAuth2, OIDC, SAML 2.0 and cloud-native architecture.

Qualifications

• 10–15 years in IT and solution architecture
• Experience in DevSecOps/SRE practice
• Cybersecurity & IAM/CIAM tools
• Experience with identity protocols and cloud platforms

Responsibilities

• Design, integrate and operate the CIAM platform end to end (front-end, back-end, API, identity services)
• Own deployment industrialization and automation
• Contribute to feasibility, design and delivery phases aligned with target architecture

Skills

DevSecOps / SRE

Cybersecurity

Solution architecture

Cloud architecture

Tools

Ping Identity

Keycloak

Okta

Auth0

OAuth2

OIDC

SAML 2.0

SCIM

FIDO2

GCP

Azure

AWS

Kubernetes

Terraform

GitOps/ArgoCD

Grafana/Prometheus

Job description

DevSecOps Developer / CIAM Architect Public Transit (Montreal)

A public transit operator in Quebec is building a CIAM platform for its riders and transport partners.

• CIAM / IAM (Ping, Keycloak, Okta, Auth0)

A public transit operator in Quebec is strengthening its IT team to design, industrialize and evolve a Customer Identity and Access Management (CIAM) platform serving its riders and transport partners.

The role

You design, integrate and operate the CIAM platform end to end (front-end, back-end, API, identity services), owning deployment industrialization and automation. You contribute to feasibility, design and delivery phases, aligned with the target architecture.

What we're looking for

• 10-15 years in IT and solution architecture, including a proven DevSecOps/SRE practice
• Cybersecurity & IAM/CIAM: Ping Identity, Keycloak, Okta, Azure External Identities, Auth0
• Protocols: OAuth2, OIDC, SAML 2.0, SCIM, FIDO2
• Cloud (GCP/Azure/AWS), Kubernetes, Terraform, GitOps/ArgoCD, observability (Grafana/Prometheus)