Identity and Access Management Consultant (Contract)

CoreFactor Inc.; Toronto; Hybrid; CAD 110,000 - 150,000; Full time

Job summary

CoreFactor Inc. in the GTA is seeking an Identity and Access Management Consultant on a contract basis to lead IAM strategy, governance, transformation and operations.

The role requires collaboration with Cybersecurity, IT, HR, and business stakeholders to deliver sustainable IAM capabilities. The consultant will guide identity governance, privileged access, authentication, directory services, and access controls across the organization, while managing vendors, budgets, and service delivery.

Qualifications

• Bachelor’s degree or equivalent education and experience.
• Seven or more years of IAM, cybersecurity, or infrastructure security experience.
• At least three years leading IAM programs, services, projects, teams, or vendors.
• Experience implementing or operating enterprise IAM in Microsoft-oriented environments.
• Experience transitioning IAM solutions from implementation to operations.

Responsibilities

• Own the IAM strategy, roadmap, standards, operating model, and governance framework.
• Lead IAM transformation initiatives and transition new capabilities into operations.
• Oversee directory services, hybrid identity, authentication, and identity synchronization.
• Lead the selection and implementation of identity-governance and privileged-access solutions.
• Establish Joiner-Mover-Leaver, access-request, RBAC, and Access Review capabilities.
• Oversee privileged-account governance across servers, applications, cloud services, service accounts, and network devices.
• Establish standards for credential vaulting, password rotation, session monitoring, emergency access, and exceptions.
• Manage IAM vendors, budgets, contracts, projects, service performance, and delivery commitments.
• Develop policies, procedures, runbooks, service levels, and performance reporting.
• Support audits, risk assessments, incidents, and remediation of IAM control deficiencies.
• Lead internal resources, contractors, and external service providers.

Skills

Identity governance

Lifecycle management

Least privilege

RBAC

Access certification

Active Directory

Microsoft Entra ID

Hybrid identity

Privileged administration

IGA platforms

PAM platforms

SailPoint

Saviynt

CyberArk

LDAP

Kerberos

SAML

OAuth

OIDC

APIs

Leadership

Stakeholder engagement

Vendor management

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related

Tools

Microsoft Entra ID

Job description

Identity and Access Management Consultant (Contract)

Contract | CoreFactor Inc. | Canada

Posted On 11/13/2026

Job Information

Utilities

Work Experience IAM, PAM, IGA

Number of Positions 1

City Etobicoke Northwest (Clairville / Humberwood / Woodbine Downs / West Humber / Kipling Heights / Rexdale / Elms / Tandridge / Old Rexdale)

State/Province Ontario

M9W

Job Description

CoreFactor is searching for an Identity and Access Management Consultant on a contract basis for a client in the GTA.

This position is hybrid and will require the successful consultant to go into the office two (2) times per week.

The Identity and Access Management Consultant will lead our clients IAM strategy, governance, transformation, and operations. The role is accountable for strengthening identity governance, privileged access, authentication, directory services, and access controls across the organization.

Working with Cybersecurity, IT, Human Resources, application owners, Audit, business stakeholders, and service providers, the consultant will deliver sustainable IAM capabilities and provide leadership on identity-related risk, architecture, technology, and operations.

Key Accountabilities

• Own the IAM strategy, roadmap, standards, operating model, and governance framework.
• Lead IAM transformation initiatives and transition new capabilities into operations.
• Oversee directory services, hybrid identity, authentication, and identity synchronization.
• Lead the selection and implementation of identity-governance and privileged-access solutions.
• Establish Joiner-Mover-Leaver, access-request, RBAC, and Access Review capabilities.
• Oversee privileged-account governance across servers, applications, cloud services, service accounts, and network devices.
• Establish standards for credential vaulting, password rotation, session monitoring, emergency access, and exceptions.
• Manage IAM vendors, budgets, contracts, projects, service performance, and delivery commitments.
• Develop policies, procedures, runbooks, service levels, and performance reporting.
• Support audits, risk assessments, incidents, and remediation of IAM control deficiencies.
• Lead internal resources, contractors, and external service providers.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline. Equivalent education and experience will be considered.
• Seven or more years of experience in IAM, cybersecurity, or infrastructure security.
• At least three years leading IAM programs, services, projects, teams, or vendors.
• Experience implementing or operating enterprise IAM capabilities in Microsoft-oriented environments.
• Experience transitioning IAM solutions from implementation into ongoing operations.

Knowledge and Skills

• Strong knowledge of identity governance, lifecycle management, least privilege, RBAC, and access certification.
• Knowledge of Active Directory, Microsoft Entra ID, hybrid identity, authentication, and privileged administration.
• Experience with leading IGA and PAM platforms. Familiarity with products such as SailPoint, Saviynt, CyberArk, or comparable solutions is an asset.
• Understanding of privileged access across Windows, Linux, applications, service accounts, cloud platforms, and network devices.
• Familiarity with LDAP, Kerberos, SAML, OAuth, OpenID Connect, RADIUS, TACACS+, and APIs.
• Strong leadership, vendor-management, stakeholder-engagement, analytical, and communication skills.

Preferred Qualifications

• Experience in a regulated, utility, telecommunications, or critical-infrastructure environment.
• Experience with IAM transformation, shared-service integrations, and identity-data remediation.
• Familiarity with NIST, ISO 27001, or CIS security frameworks.
• Certifications such as CISSP, CISM, CISA, Microsoft identity certifications, or relevant IAM/PAM platform certifications.