Identity Access Management (IAM) Migration Specialist

CGI; Toronto; On-site; CAD 144,000 - 214,000; Full time

Job summary

A leading IT consulting firm is seeking an experienced Identity and Access Management (IAM) professional to lead complex migrations in hybrid cloud environments. The candidate will manage the transition from legacy to modern identity solutions, collaborating closely with IT and compliance teams. The role requires 5+ years of IAM experience and expertise in platforms such as Microsoft Entra ID and Okta. This position offers a competitive salary with a range from $105,000 to $155,000, and is located in cities including Toronto and Mississauga.

Benefits

Health and well-being support

Career growth opportunities

Diversity and inclusion initiatives

Qualifications

• 5+ years of hands-on IAM experience, including complex migration projects.
• Expertise in Microsoft Entra ID, Active Directory, Okta, SailPoint, PowerShell, Graph API, and KQL.
• Strong understanding of identity federation protocols and hybrid identity architecture.

Responsibilities

• Lead the design and execution of IAM migrations.
• Own the migration roadmap: planning, execution, and post-migration optimization.
• Perform regular risk assessments and vulnerability analyses focused on identity infrastructure.

Skills

Identity and Access Management (IAM)

English

Active Directory

PowerShell

Education

Bachelor’s degree in Computer Science or related field

Tools

Microsoft Entra ID

Okta

SailPoint

Graph API

Kusto Query Language (KQL)

Job description

Location: Mississauga, Ottawa, Calgary, Toronto or other locations within proximity to a CGI Office.

Security Clearance: Must have or eligible to obtain Federal Reliability Security Clearance.

Bilingualism: French/English is highly desirable.

We’re looking for a seasoned Identity and Access Management (IAM) professional with deep experience in complex migrations and hybrid cloud environments. This role is hands‑on and strategic, focused on leading the transition from legacy identity platforms to modern, scalable solutions. You’ll work closely with IT, DevOps, and compliance teams to ensure our identity infrastructure is secure, compliant, and future‑ready.

Your future duties and responsibilities:

Identity & Access Management

• Lead the design and execution of IAM migrations, including transitioning from SailPoint IIQ to Okta and modernizing federation protocols (e.g., WsFed to SAML/OIDC).
• Architect and maintain hybrid identity environments using Microsoft Entra ID, Entra Connect, and Conditional Access.
• Conduct IAM audits and generate reports using Microsoft Graph API, Kusto Query Language (KQL), and Log Analytics.
• Define and enforce access policies across cloud and on‑prem systems.

Migration Leadership

• Own the migration roadmap: planning, execution, and post‑migration optimization.
• Collaborate with application owners and solution architects to re‑platform identity integrations with minimal disruption.
• Lead data mapping, schema transformation, and access policy redesign during migrations.

Security & Risk Management

• Perform regular risk assessments and vulnerability analyses focused on identity infrastructure.
• Implement controls to mitigate risks and ensure compliance with frameworks like ISO 27001, NIST, GDPR, and HIPAA.
• Monitor environments using SIEM tools and respond to incidents with root cause analysis and remediation plans.

Required qualifications to be successful in this role:

Technical Skills

• 5+ years of hands‑on IAM experience, including complex migration projects.
• Expertise in Microsoft Entra ID, Active Directory, Okta, SailPoint, PowerShell, Graph API, and KQL.
• Strong understanding of identity federation protocols and hybrid identity architecture.

Certifications (Preferred)

• Microsoft SC-300: Identity and Access Administrator
• Okta Certified Professional or Architect
• SailPoint IdentityNow/IIQ Certification
• Azure AZ-104 or AZ-305

Soft Skills

• Strong analytical and problem‑solving abilities.
• Excellent communication and documentation skills.
• Proven ability to lead cross‑functional teams and manage high‑impact projects.

Other Requirements

• Bachelor’s degree in Computer Science or related field (or equivalent experience).
• Eligible for Federal Reliability Security Clearance.

CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $105,000–$155,000. This role is an existing vacancy.

Skills

• English
• Active Directory
• Identity and Access Mgt (IAM)
• PowerShell

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well‑being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal‑opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team—one of the largest IT and business consulting services firms in the world.