IAM Analyst-CyberArk /ForgeRock

BeachHead Inc.; Toronto; On-site; CAD 95,000 - 114,000; Full time

Job summary

BeachHead Inc. is seeking an IAM Analyst specializing in CyberArk and ForgeRock to implement and support MFA solutions within a large banking environment. You will lead IAM initiatives, collaborate with stakeholders, and help advance zero-trust security measures.

The role emphasizes hands-on IAM design, deployment, and ongoing optimization, with a focus on authentication protocols and cloud integration, particularly in Azure.

Qualifications

• 7-10 years of information security experience with IAM and MFA focus.
• Proficiency with CyberArk and ForgeRock IAM platforms.
• Knowledge of authentication protocols: OAuth, SAML, OpenID, FIDO, and SSO.
• Hands-on experience in cloud environments, especially Azure.
• Strong understanding of ITIL service lifecycle processes.
• Ability to interpret complex security information and lead technical evaluations.
• Project management skills with a focus on security initiatives.
• Excellent communication skills, capable of collaborating with technical and business teams.
• Certified in CISSP, CCSP, or similar security credentials.

Responsibilities

• Design, implement, and support CyberArk and ForgeRock IAM solutions, including MFA components.
• Collaborate with business partners to assess security risks and recommend practical solutions.
• Lead the review, testing, and deployment of security products and controls.
• Provide technical expertise on authentication protocols such as OAuth, SAML, OpenID, FIDO, and SSO.
• Maintain and enhance multi-factor authentication processes and controls.
• Support cloud environments, primarily Azure, for IAM integrations.
• Contribute to enterprise-wide zero trust security strategy and policy development.
• Partner with senior management to present security assessments and technical recommendations.
• Ensure project objectives are met on time and within budget, supporting project delivery and stakeholder adoption.
• Stay current on industry trends, tools, and best practices related to IAM and MFA solutions.

Skills

IAM & MFA

CyberArk

ForgeRock

OAuth

SAML

OpenID

FIDO

SSO

Azure

ITIL

Security leadership

Education

CISSP

CCSP

Job description

Are you experienced in Identity and Access Management with CyberArk and ForgeRock?

Working with one of our top financial clients, this role calls for an IAM Analyst-CyberArk /ForgeRock. You will be a key contributor within the Identity and Access Management team, focusing on implementing and supporting advanced MFA solutions, and collaborating with various stakeholders to enhance security measures in a large banking environment.

Pay rate range (CAD): $68.84/hr – $82.61/hr

Responsibilities

• Design, implement, and support CyberArk and ForgeRock IAM solutions, including MFA components.
• Collaborate with business partners to assess security risks and recommend practical solutions.
• Lead the review, testing, and deployment of security products and controls.
• Provide technical expertise on authentication protocols such as OAuth, SAML, OpenID, FIDO, and SSO.
• Maintain and enhance multi-factor authentication processes and controls.
• Support cloud environments, primarily Azure, for IAM integrations.
• Contribute to enterprise-wide zero trust security strategy and policy development.
• Partner with senior management to present security assessments and technical recommendations.
• Ensure project objectives are met on time and within budget, supporting project delivery and stakeholder adoption.
• Stay current on industry trends, tools, and best practices related to IAM and MFA solutions.

Desired Skill-Set

• 7-10 years of experience in information security, with a focus on IAM and MFA solutions.
• Proficiency with CyberArk and ForgeRock IAM platforms.
• Extensive knowledge of authentication protocols: OAuth, SAML, OpenID, FIDO, SSO.
• Hands‑on experience in cloud environments, especially Azure.
• Strong understanding of ITIL service lifecycle processes.
• Ability to interpret complex security information and lead technical evaluations.
• Project management skills with a focus on security initiatives.
• Excellent communication skills, capable of collaborating with technical and business teams.
• Certified in CISSP, CCSP, or similar security credentials.

Nice to Have

• Experience with adaptive and passwordless MFA solutions.
• Familiarity with API/web protocols: XML, SOAP, JSON, REST.
• Knowledge of market-leading tools such as Microsoft, CyberArk, ForgeRock.
• Previous experience in banking or financial institutions.
• Advanced certifications in security or project management.

BeachHead is an equal opportunity agency and employer. We advocate for our candidates and welcome applicants regardless of race, color, religion, national origin, sex, age, or physical or mental disability. BeachHead or our clients may use technology-enabled tools, including automation and artificial intelligence (AI), to support parts of the recruitment process such as resume screening, application management, and candidate matching. These tools assist our recruiters and our clients, and do not replace human decision-making. This job posting represents a current or anticipated vacancy. The position may be filled at any time, and the posting may be removed without notice once the role has been filled.