Identity & Access Management (IAM) Directory Engineer

Q1 Technologies, Inc.; Montreal (administrative region); Hybride; CAD 90 000 - 130 000; Plein temps

Résumé du poste

Q1 Technologies, Inc. in Montreal seeks four IAM Directory Engineers specializing in Ping Directory Server and ForgeRock DS to deploy, optimize, and maintain our identity directory services. You will contribute to automation, security, and cloud identity integrations in a hybrid environment.

The role requires 5+ years in IAM, a relevant technical degree, and hands-on experience with Ping/ForgeRock products, LDAP, and SCIM. An in-person interview is mandatory during selection.

Qualifications

• 5+ years of Identity & Access Management (IAM), Directory Services, or Infrastructure Engineering experience.
• Bachelor’s degree in Computer Science, Information Technology, Electrical Engineering, or a related field.
• Hands-on with Ping Directory Server and/or ForgeRock DS.
• Strong knowledge of LDAP, SCIM APIs, and security best practices.
• Solid Linux administration and certificate lifecycle management.

Responsabilités

• Architect, configure, and maintain directory environments using Ping Directory Server and ForgeRock DS.
• Support and integrate ForgeRock IDM and Microsoft Entra ID within the IAM portfolio.
• Manage LDAP and SCIM protocols across enterprise systems.
• Implement encryption-in-transit and TLS, including certificate management.
• Provide Unix/Linux administration focused on RHEL/CentOS.
• Automate deployment topologies and directory updates using Ansible, Terraform, Git, and Jenkins.

Connaissances

IAM

Directory Services

LDAP

SCIM

Automation

Ansible

Terraform

Jenkins

Kubernetes

Docker

Formation

Bachelor's degree in Computer Science / IT / Electrical Engineering

Outils

Ping Directory Server

ForgeRock DS

ForgeRock IDM

Microsoft Entra ID

RHEL

Ansible

Terraform

Git

Jenkins

Kubernetes

Docker

Description du poste

Identity & Access Management (IAM) Directory Engineer

Location: Montreal, QC, Hybrid (3 days a week in office)

Experience Level: Mid to Senior Level (5+ Years)

Role Overview

We are seeking four (4) skilled IAM Directory Engineers specializing in Ping Directory / ForgeRock DS to join our enterprise infrastructure team. In this role, you will be responsible for deploying, optimizing, and maintaining our identity directory services and identity management portfolios. You will work within a hybrid environment to ensure secure encryption, automate directory deployments, and integrate cloud-based identity solutions.

Note: This position requires a mandatory Face-to-Face (In-Person) Interview during the selection process.

Key Responsibilities

• Directory Services Management: Architect, configure, and maintain robust directory environments utilizing Ping Directory Server and ForgeRock DS.
• Identity Portfolio Integration: Support and integrate broader Identity Management (IDM) frameworks, including ForgeRock IDM and Microsoft Entra ID.
• Protocol Implementation: Manage and troubleshoot enterprise directory communication using standards-based protocols like LDAP and SCIM.
• Security & Encryption: Implementation of encryption-in-transit solutions, overseeing TLS protocols and end-to-end certificate management.
• System Administration: Provide core Unix/Linux systems administration, primarily focusing on RedHat Enterprise Linux (RHEL) and CentOS platforms.
• Automation & IaC Pipelines: Drive efficiency by automating deployment topologies and directory updates using Ansible, Terraform, Git, and Jenkins pipelines.

Required Qualifications

• Experience: 5+ years of dedicated experience in Identity & Access Management (IAM), Directory Services, or Infrastructure Engineering.
• Education: Bachelor’s degree in Computer Science, Information Technology, Electrical Engineering, or a relevant technical field.
• Core Technology Stack: Proven hands-on familiarity with Ping Identity Ping Directory Server and/or ForgeRock DS.
• Protocol Mastery: Deep understanding of LDAP infrastructure, schema management, access controls, and SCIM APIs.
• OS & Security: Strong foundation in Linux system administration accompanied by solid certificate lifecycle management skills.

Preferred Skills

• Experience managing identity migrations or synchronizations between legacy directory servers and cloud identity providers.
• Familiarity with enterprise container environments (Kubernetes/Docker) for deploying containerised directory nodes.
• Strong troubleshooting skills in identifying performance bottlenecks within high-volume directory lookups.