Engineer II (IAM Federation Services)

TD Bank; Toronto; Hybrid; CAD 91,000 - 137,000; Full time

Job summary

An established industry player is seeking an Engineer II for IAM Federation Services. This role involves collaborating with Security Engineering and Information Security teams to develop IAM strategies and technology roadmaps. You will design and engineer enhancements to existing IAM platforms, ensuring compliance with audit requirements and providing technical consultation. The ideal candidate should have a strong understanding of IAM, experience with various protocols, and the ability to manage multiple projects in a fast-paced environment. Join a dynamic team committed to inclusivity and innovation, where your contributions will directly impact the company's success.

Qualifications

• Strong understanding of IAM and experience with multiple 3rd party IAM solutions.
• Hands-on experience with IAM products on UNIX and/or Windows platforms.

Responsibilities

• Support the development of IAM strategy and technology roadmaps.
• Design enhancements to existing IAM platforms and ensure project execution.

Skills

Identity & Access Management (IAM)

SAML

OpenID Connect

Oauth

LDAP

Kerberos

WS-Fed

Single Sign On

MFA

Java

Javascript

Python

Unix/Linux Bash shell

regex

Job description

Engineer II (IAM Federation Services)

Engineer II (IAM Federation Services)

Apply remote type Hybrid locations Toronto, Ontario time type Full time posted on Posted 2 Days Ago time left to apply End Date: June 30, 2025 (30+ days left to apply) job requisition id R_1404359

Work Location: Toronto, Ontario, Canada

Hours: 37.5

Line of Business: Technology Solutions

Pay Details: $91,200 - $136,800 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role.

Job Description:

Responsibilities

• Work with Security Engineering, Enterprise architecture, and Information Security teams to support the development of IAM strategy and technology roadmaps.
• Design & engineer enhancements and upgrades to our existing IAM platforms. Produce enterprise-level designs to meet business, application and security requirements.
• Ensure successful executing of IAM projects and solutions in collaboration with operations, information security, architecture, and project managers.
• Serve as a last line of escalation for IAM Services and supporting utilities. Provide application support and troubleshooting for issues that cannot be resolved by tier one, two and three support.
• Work with IAM vendors to resolve application, software and hardware issues in a timely manner.
• Create and maintain system documentation for IAM Services and affiliated technologies, including installation, configuration, and appropriate troubleshooting steps.
• Design and implement solutions to meet audit & compliance requirements.
• Drive the technical evaluation of vendor products.
• Provide technical consultation and assist the application teams in the use of IAM services.
• Provide training to junior engineers and operations team as required.

Technical & Professional Qualifications

• Strong understanding of the Identity & Access Management (IAM) space and experience with multiple 3rd party IAM solutions.
• Working knowledge of industry standards & protocols including SAML, OpenID Connect, Oauth, LDAP, Kerberos, WS-Fed, etc.
• Design, engineering, and implementation experience with the following technologies:
• Single Sign On, MFA, & Adaptive Risk-based authentication
• Identity Federation
• Authentication & Authorization for REST, Microservices, & SOAP
• IAM integration with cloud platforms AWS/Azure/Google and SaaS Services
• Directory integration including Active Directory, LDAP, Virtual Directories
• Integration with provisioning & attestation systems
• Crypto
• Java, Javascript, Python, and Unix/Linux Bash shell, and regex.
• Co-ordinate execution of IAM Controls through WIAM Platform capabilities.
• Hands on experience installing, configuring, and troubleshooting IAM products and Services on UNIX and/or Windows platforms.
• Experience in scripting to automate tasks, configuration changes, data collection and user provisioning.
• Must have a working knowledge of LAN/WAN/Firewall/VPN network technologies, monitoring, and support best practices.
• Ability to provide expertise to application developers on best practices use of IAM technologies.
• Have a good understanding of current regulatory environment and related implications to identity management, security and audit compliance.
• Ability to balance working on multiple projects in a fast-paced environment.

Inclusiveness

At TD, we are committed to fostering an inclusive, accessible environment, where all employees and customers feel valued, respected, and supported. We are dedicated to building a workforce that reflects the diversity of our customers and communities in which we live and serve.