IAM Engineer

Tata Consultancy Services Limited; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Tata Consultancy Services Limited in Canada is hiring for an Azure/Entra ID IAM specialist to design and enforce identity governance. You’ll implement PIM, configure CA policies, manage RBAC, and coordinate Defender for Cloud integrations with ServiceNow.

The role requires 3+ years in Azure IAM, strong documentation, and excellent stakeholder communication. Travel and remote work not specified; Canada-based posting hints at onsite work in Toronto area.

Qualifications

• 3+ years of IAM experience in Azure/Entra ID.
• Deep knowledge of Azure RBAC, PIM, CA and Entra roles.
• Experience with MFA enforcement and access policies.
• Understanding of identity lifecycle management and access certification.
• Familiarity with Defender for Cloud and Secure Score.
• Experience with ServiceNow integrations for IAM workflows.
• SC-300 certification preferred.
• Strong documentation and stakeholder communication.

Responsibilities

• Design and implement Azure Entra ID identity governance.
• Configure PIM for just-in-time privileged access.
• Implement and enforce Conditional Access policies and MFA.
• Manage RBAC across subscriptions, resource groups, and management groups.
• Remediate guest identities and excessive permissions.
• Integrate Defender for Cloud governance rules with ServiceNow.
• Support cross-cloud IAM alignment (AWS, OCI).
• Participate in IAM audits and access reviews.

Skills

IAM experience

Azure Entra ID

RBAC management

MFA enforcement

PIM expertise

Documentation & comms

ServiceNow integration

Tools

ServiceNow

AWS IAM

OCI IAM

Defender for Cloud

Job description

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.

Tata Consultancy Services (BSE: 532540, NSE: TCS) is the technology partner of choice for industry-leading organizations worldwide. Since its inception in 1968, TCS has upheld the highest standards of innovation, engineering excellence and customer service.

It has set an aspiration to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence.

Rooted in the heritage of the Tata Group, TCS is focused on creating long term value for its clients, its investors, its employees, and the community at large. With a highly skilled workforce spread across 56 countries and 194 service delivery centers across the world, the company has been recognized as a top employer in six continents. With the ability to rapidly apply and scale new technologies, the company has built long term partnerships with its clients. Many of these relationships have endured into decades and navigated every technology cycle, from mainframes in the 1970s to artificial intelligence today.

Key Responsibilities

• Design and implement Azure Entra ID (formerly Azure AD) identity governance frameworks.
• Configure and manage Privileged Identity Management (PIM) for just-in-time privileged access.
• Implement and enforce Conditional Access policies, MFA, and phishing-resistant authentication (FIDO2, Passkeys).
• Manage RBAC role assignments across Azure subscriptions, resource groups, and management groups.
• Remediate guest user accounts, stale identities, and excessive permission assignments.
• Configure and maintain Break Glass (emergency access) accounts with monitoring and alerting.
• Integrate Microsoft Defender for Cloud governance rules with ServiceNow for ticketing workflows.
• Support cross-cloud IAM alignment across AWS IAM and OCI IAM where applicable.
• Participate in IAM audits, access reviews, and compliance reporting.
• Develop IAM runbooks, RBAC mapping documentation, and onboarding guides.

Required Qualifications

• IAM experience, with 3+ years in Microsoft Azure / Entra ID.
• Deep knowledge of Azure RBAC, PIM, Conditional Access, and Entra ID roles.
• Experience with MFA enforcement, authentication methods, and access policies.
• Understanding of identity lifecycle management and access certification processes.
• Familiarity with Microsoft Defender for Cloud and Secure Score recommendations.
• Experience with ServiceNow or ticketing system integrations for IAM workflows.
• Microsoft Certified: Identity and Access Administrator (SC-300) preferred.
• Strong documentation and stakeholder communication skills.

Nice to Have

• Experience with AWS IAM, Organizations, and SCPs.
• Knowledge of OCI IAM compartments and policy structures.
• Exposure to SASE or Zero Trust Network Access (ZTNA) frameworks.

TCS does not use artificial intelligence tools for candidate screening or evaluation. This post is for a current vacancy. The hiring process includes an initial screening, followed by a technical evaluation and managerial discussion. Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodation during the recruitment and selection process, please inform Human Resources. Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2-week period.