Principal IAM: Zero-Trust Identity & Access Architect

Bilinguallink; Saint-Jérôme; Remote; CAD 92,000 - 115,000; Full time

Benefits offered by this job

Flexible schedules

Multiple locations

Total rewards package

Job summary

Toromont Cat is seeking a Principal, Identity & Access Management to lead the IAM program across IT and OT/ICS. You will drive strategy, architecture, and a multi-year roadmap to establish identity as a core Zero Trust capability, while mentoring teams and coordinating with risk and audit.

You will implement lifecycle automation for human and non-human identities, manage PAM and IGA rollout, and set standards for SSO/MFA, RBAC, and entitlements across a secure access ecosystem.

Qualifications

• 8+ years IAM experience with hands-on in core IAM domains.
• Identity lifecycle management for human and non-human identities.
• Experience implementing IGA, RBAC, and access reviews.
• Experience with PAM tools and secrets management.
• Knowledge of SSO/MFA, federation, and zero trust principles.
• Experience in audit/compliance and risk evidence.

Responsibilities

• Lead enterprise IAM strategy, reference architecture, and multi-year roadmap for IT and OT/ICS.
• Automate lifecycle management for human and non-human identities with governance.
• Implement PAM for privileged accounts with vaulting and JIT/JEA.
• Deploy IGA platform: RBAC, entitlements, access workflows, SoD, certification.
• Establish enterprise SSO, MFA, conditional access, and federation standards aligned to Zero Trust.

Skills

8+ years IAM experience

Identity lifecycle & JML

IGA platforms

PAM tools

SSO/MFA & federation

Machine/service identity governance

Zero Trust

Audit & compliance

Tools

SailPoint

Saviynt

Entra ID Governance

Job description

Toromont Cat is seeking a Principal, Identity & Access Management to lead the IAM program across IT and OT/ICS. You will drive strategy, architecture, and a multi-year roadmap to establish identity as a core Zero Trust capability, while mentoring teams and coordinating with risk and audit.

You will implement lifecycle automation for human and non-human identities, manage PAM and IGA rollout, and set standards for SSO/MFA, RBAC, and entitlements across a secure access ecosystem.