Remote Principal, Identity & Access Management

Bilinguallink; Boucherville; Remote; CAD 92,000 - 115,000; Full time

Benefits offered by this job

Flexible work schedules

Internal training programs

Job summary

Toromont Cat is seeking a Principal, Identity & Access Management to lead our IAM program across human and nonhuman identities. Reporting to the Director, Cybersecurity, this role sets the IAM strategy, architecture, and roadmap to establish identity as a core Zero-Trust capability across IT and OT/ICS.

You will drive IAM capabilities including lifecycle automation, SSO/MFA, PAM, and IGA rollout, serving as the enterprise IAM authority and mentoring technical teams.

Qualifications

• 8+ years IAM experience across core IAM domains.
• Identity lifecycle & JML for human and nonhuman identities.
• IGA platforms such as SailPoint, Saviynt, or Entra ID Governance; RBAC and entitlements.

Responsibilities

• Lead enterprise IAM strategy, reference architecture, and multi-year roadmap across IT and OT/ICS.
• Build and automate lifecycle management for human and nonhuman identities with full JML automation.
• Implement PAM for privileged accounts including vaulting, JIT/JEA, and secrets management.
• Deploy the IGA platform; define RBAC, personas, entitlements, and certification processes.
• Establish enterprise SSO, MFA, conditional access, and federation standards aligned to Zero Trust.

Skills

IAM experience

Identity lifecycle

IGA platforms

PAM tools

SSO/MFA

Machine identity governance

Zero Trust

Audit & compliance

Tools

SailPoint

Saviynt

Entra ID Governance

CyberArk

BeyondTrust

Delinea

Job description

Toromont Cat is seeking a Principal, Identity & Access Management to join our team. The Principal, IAM leads Toromont's identity program across all human and nonâhuman identities. Reporting to the Director, Cybersecurity, this role sets the IAM strategy, architecture, and roadmap to establish identity as a core ZeroâTrust capability across IT and OT/ICS.

They drive key IAM capabilities: identity lifecycle and JML automation, SSO/MFA and conditional access, PAM, and IGA rollout while guiding how access is managed securely at scale. The role serves as the enterprise IAM authority, mentors technical teams, partners with risk and audit, and represents IAM in architecture reviews and vendor evaluations.

Please note: the successful candidate may be based anywhere in Canada, including ON, QC, NS, MB, NB, PEI, or NL.

Pay Type

Full Time, Permanent

Compensation

$91,820 - $114,776

The listed base salary is just one component of our total rewards package, and performance-based or discretionary bonuses may be available

As a Principal, Identity & Access Management, YOU will experience:

• Working within one of the safest organizations in the industry where your safety and well-being are our most important priority
• Working for the best in class equipment dealer and with the premium Caterpillar brand
• Opportunities to continuously Learn, Grow and Develop with our Toromont team through our internal Training teams that are geared for your success
• Competitive total rewards including: wages, benefits, and premiums (as eligible)
• An opportunity for flexible work schedules and opportunities across multiple locations, from Manitoba to Newfoundland

In a typical day, YOU will:

• Lead the enterprise IAM strategy, reference architecture, standards, and multiâyear roadmap across IT and OT/ICS.
• Build and automate lifecycle management for human and nonâhuman identities (including AI and agent service accounts), with full JML automation and governance.
• Implement PAM for all privileged accounts with vaulting, JIT/JEA access, session controls, and secrets management.
• Deploy the IGA platform; define RBAC, personas, entitlements, access workflows, SoD controls, and certification processes.
• Establish enterprise SSO, MFA, conditional access, and federation standards aligned to Zero Trust.

Must-haves for this role:

• 8+ years IAM experience - Strong handsâon background across core IAM domains.
• Identity lifecycle & JML - Human and nonâhuman identity management expertise.
• IGA platforms - SailPoint, Saviynt, or Entra ID Governance; RBAC, personas, entitlements, access reviews, SoD.
• PAM tools - CyberArk, BeyondTrust, or Delinea; vaulting, JIT/JEA, session and secrets management.
• SSO/MFA & federation - SAML, OIDC, OAuth2, SCIM; conditional access (Entra ID/Okta/Duo).
• Machine/service identity governance - Workload, machine, and service-account controls, plus AI and agent service-account governance.
• Zero Trust - Strong grounding in least-privilege and identity-centric security.
• Audit & compliance - SOC, FSA and access certifications; audit evidence and reporting.

About Toromont Cat

With over 4,000 employees and 56 locations from Manitoba to Newfoundland, Toromont Cat has a proven track record, industry knowledge, dealership infrastructure, and service mindset to ensure our Construction, Mining, and Power Generation customers succeed. At Toromont Cat, work is built around people's strengths, our products, technology and an outstanding customer experience and through our strong partnership with Caterpillar ™,Toromont Cat takes care of our employees who take care of our customers! When you join ourteam, you become a member of the Toromont family. Your success is our success!

Artificial Intelligence (AI)

Please note that our hiring processes involve the use of artificial intelligence (AI) tools to assist with screening, assessing, or selecting candidates; all final decisions are reviewed by our Talent Acquisition team to ensure fairness and compliance with applicable laws