IAM Engineer

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading tech firm in Toronto is looking for an IAM / ISAM Engineer with 6–8 years of experience. The successful candidate will design, configure, and maintain SSO solutions using IBM Security Access Manager (ISAM) and will be involved with AWS and DevOps teams. Strong understanding of authentication protocols such as SSO, SAML, OAuth, and OIDC is essential. The role also includes implementing multi-factor authentication and ensuring compliance with security best practices in a hybrid environment.

Qualifications

• 6–8 years hands-on experience with IBM Security Access Manager (ISAM).
• Strong knowledge of SSO, SAML2.0, OAuth, OIDC, and multi-factor authentication.
• Experience with policy server concepts, ACL, POP, and group imports.

Responsibilities

• Configure and maintain ISAM for SSO solutions.
• Implement federated SSO using SAML standards.
• Collaborate with DevOps teams for efficient solution deployment.

Skills

IAM solutions

SSO and SAML

OAuth and OIDC

AWS cloud security

Ansible automation

identity management concepts

Tools

IBM Security Access Manager (ISAM)

AWS

DevOps tools

Job description

Job Title

IAM / ISAM Engineer – SSO, SAML, OAuth, OIDC (AWS)

Location

Toronto, Hybrid

Experience

6–8 years

Job Summary

We are seeking a skilled IAM / ISAM Engineer with hands‑on experience in IBM Security Access Manager (ISAM) and identity management solutions. The ideal candidate will design, configure, and maintain SSO solutions, federated authentication, and advanced access controls, while working closely with cloud and DevOps teams. Exposure to banking domains and online banking applications is a plus.

This role requires strong knowledge of SSO, SAML2.0, OAuth, OIDC, multi‑factor authentication, and policy server concepts, along with experience in AWS and DevOps tools.

Key Responsibilities

ISAM & IAM Implementation

• Configure and maintain IBM Security Access Manager (ISAM) for SSO solutions.
• Implement federated SSO using SAML standards.
• Create and manage Junctions, configure policy servers, ACLs, POP, and group imports.
• Configure Authorization servers, reverse proxies, and LDAP integration.
• Implement multi‑factor authentication, OAuth, OIDC, and other authentication mechanisms.

Security & Access Management

• Apply knowledge of Advanced Access Control and Federation modules.
• Support identity management solutions for banking and online business applications.
• Ensure compliance with security best practices and IAM policies.

Cloud & DevOps Collaboration

• Support AWS cloud‑based security deployments.
• Apply automation using Ansible and collaborate with DevOps teams for efficient solution deployment.
• Participate in configuration management, CI/CD processes, and system monitoring.

Documentation & Support

• Maintain system documentation, runbooks, and knowledge transfer materials.
• Troubleshoot, debug, and resolve IAM/ISAM issues in live environments.
• Collaborate with stakeholders for requirements, solutions design, and implementation guidance.

Required Skills & Experience

• 6–8 years of hands‑on experience in IBM Security Access Manager (ISAM).
• Strong understanding of SSO, SAML2.0, OAuth, OIDC, and multi‑factor authentication.
• Experience with policy server concepts: ACL, POP, junction creation, group imports.
• Knowledge of reverse proxy, authorization server, LDAP configuration.
• Exposure to AWS cloud security concepts.
• Familiarity with Ansible automation and DevOps practices.
• Good understanding of identity management concepts and security best practices.

Desirable / Good‑to‑Have

• Experience in Banking domains and Online Banking applications.
• Exposure to ignio AI or ERP operations.
• Hands‑on experience in system administration, automation, or CI/CD pipelines.
• Knowledge of IAM integration with mission‑critical business applications.