Expert in AI governance

CoFoMo Inc.; Montreal (administrative region); On-site; CAD 120,000 - 190,000; Full time

Job summary

CoFoMo Inc. is seeking an experienced IT architect to lead the design and deployment of CIAM and related security architectures in a hybrid Canada-wide setting.

You will design scalable identities, APIs and infrastructure across cloud providers, while guiding teams through modern DevSecOps practices and secure software delivery. Ideal candidates will have a strong background in cybersecurity, modern identity platforms (PingOne, Keycloak, Okta, Azure/Google/AWS CIAM), and fluent French and

Qualifications

• Bachelor's degree in information technology or computer engineering.
• 10–15 years of experience in IT and solution architecture.
• Expertise across data, applications and infrastructure domains.
• Master DevSecOps and SRE principles.
• Fluent in French and English for daily tasks and client communication.

Responsibilities

• Design, integrate, operate and scale a CIAM platform for front-end, back-end, API and identity services.
• Support integration of solutions with user and partner applications.
• Automate deployment and industrialize solution delivery.
• Contribute to feasibility studies and architecture design of software packages.
• Recommend secure, reliable and high-performance tech solutions.
• Promote reuse of proven solutions to improve service quality and operations.
• Act as consultant and coach to multidisciplinary teams.
• Drive cloud computing experiments and cloud implementation programs.
• Quality assure architecture documentation and diagrams.
• Design scalable, high-performance, secure infrastructure and networks.
• Collaborate with service providers to ensure performance and resilience.
• Diagnose and resolve complex operational issues and perform risk/cost analyses.

Skills

IAM/CIAM expertise

Cloud computing

DevSecOps

SRE principles

Agile/SAFe

Architecture design

API development

Kubernetes

CI/CD pipelines

Cybersecurity

Front-end tech (JS/HTML/CSS)

Cloud networking

Education

Bachelor's degree in information technology or computer engineering

Tools

PingOne Advanced Identity

Keycloak

Okta

Azure External Identities

Google Cloud Platform CIAM

Auth0

Ping Identity

API gateway (Apigee/Kong/Traefik)

Job description

Here's a brief overview of the tasks and responsibilities you'll have :

• Design, integrate, operate, and scale a customer identity and access management (CIAM) platform covering front-end, back-end, API, and identity services
• Support the integration of solutions with user and partner applications
• Ensure the industrialization and automation of the deployment of solutions
• Contribute to feasibility studies, design and implementation of software package development and integration projects
• Recommend secure, reliable and high-performance technological solutions that meet business needs
• Promote the reuse of proven solutions to optimize the quality of services and operations
• Act as a consultant and support teams and members of the next generation
• Drive technological experiments and the implementation of cloud computing environments
• Perform quality assurance of architecture documentation
• Design scalable, high-performance and secure technological infrastructures
• Collaborate with service providers to ensure infrastructure performance
• Assist in the diagnosis and resolution of complex operational problems
• Perform risk analyses as well as cost-benefit analyses.

The profile you are looking for is as follows:

• Bachelor's degree in information technology or computer engineering
• Ten (10) to fifteen (15) years of experience in information technology and solution architecture
• Demonstrate expertise covering data, applications and infrastructure
• Master DevSecOps and SRE principles
• Excellent analytical, synthesis and recommending skills
• Be versatile, proactive and independent
• Exercise mobilizing leadership with multidisciplinary teams
• Master Agile and SAFe methodologies
• Demonstrate a good understanding of business issues
• Expertise in cybersecurity and identity and access management (IAM/CIAM)
• Be proficient in deploying and supporting CIAM platforms, including PingOne Advanced Identity, Keycloak, Okta, Azure External Identities, Google Cloud Platform CIAM, Auth0, or Ping Identity
• Design, configure and optimize user journeys as well as OAuth2, OpenID Connect (OIDC), SAML 2.0, SCIM, FIDO2, OpenFGA, biometric mechanisms and digital certificates
• Demonstrate expertise in front-end technologies, including JavaScript, HTML and CSS/SCSS
• Deploy automated cloud solutions on Google Cloud Platform (GCP), Microsoft Azure, or Amazon Web Services (AWS)
• Develop and deploy API solutions on Kubernetes
• Master the concepts of secure cloud networking, including WAF, DNS and DDoS protection
• Be familiar with observability and monitoring tools, including Grafana, Prometheus, OpenTelemetry, Syslog, Cloud Monitoring, Azure Monitor, and Log Analytics
• Master framework-as-code (Terraform) approaches as well as CI/CD pipelines using tools such as GitHub, ArgoCD, GitOps, and SonarQube
• Knowledge of C#, JavaScript as well as software engineering principles, distributed architectures, microservices, API integration, and event architecture
• Be proficient in an API gateway solution, including Apigee, Traefik, API Gateway, Kong, or Entra ID
• Apply development best practices, including TDD, code coverage, OWASP, and code reviews
• Knowledge of relational and non-relational databases, including SQL, NoSQL, and caching solutions
• Understand the principles of SaaS integration
• Knowledge of privacy legislation and computer security standards and guidelines (an asset)
• This position requires fluency in French and English for daily tasks, understanding documentation, and professional communication with customers, suppliers, and colleagues across Canada. French and English language skills are essential, both oral and written.