Remote Principal, Identity & Access Management

Bilinguallink; Saint-Jérôme; Remote; CAD 92,000 - 115,000; Full time

Benefits offered by this job

Flexible schedules

Multiple locations

Total rewards package

Job summary

Toromont Cat is seeking a Principal, Identity & Access Management to lead the IAM program across IT and OT/ICS. You will drive strategy, architecture, and a multi-year roadmap to establish identity as a core Zero Trust capability, while mentoring teams and coordinating with risk and audit.

You will implement lifecycle automation for human and non-human identities, manage PAM and IGA rollout, and set standards for SSO/MFA, RBAC, and entitlements across a secure access ecosystem.

Qualifications

• 8+ years IAM experience with hands-on in core IAM domains.
• Identity lifecycle management for human and non-human identities.
• Experience implementing IGA, RBAC, and access reviews.
• Experience with PAM tools and secrets management.
• Knowledge of SSO/MFA, federation, and zero trust principles.
• Experience in audit/compliance and risk evidence.

Responsibilities

• Lead enterprise IAM strategy, reference architecture, and multi-year roadmap for IT and OT/ICS.
• Automate lifecycle management for human and non-human identities with governance.
• Implement PAM for privileged accounts with vaulting and JIT/JEA.
• Deploy IGA platform: RBAC, entitlements, access workflows, SoD, certification.
• Establish enterprise SSO, MFA, conditional access, and federation standards aligned to Zero Trust.

Skills

8+ years IAM experience

Identity lifecycle & JML

IGA platforms

PAM tools

SSO/MFA & federation

Machine/service identity governance

Zero Trust

Audit & compliance

Tools

SailPoint

Saviynt

Entra ID Governance

Job description

Toromont Cat is seeking a Principal, Identity & Access Management to join our team. The Principal, IAM leads Toromont's identity program across all human and nonâhuman identities. Reporting to the Director, Cybersecurity, this role sets the IAM strategy, architecture, and roadmap to establish identity as a core ZeroâTrust capability across IT and OT/ICS.

They drive key IAM capabilities: identity lifecycle and JML automation, SSO/MFA and conditional access, PAM, and IGA rollout while guiding how access is managed securely at scale. The role serves as the enterprise IAM authority, mentors technical teams, partners with risk and audit, and represents IAM in architecture reviews and vendor evaluations.

Please note: the successful candidate may be based anywhere in Canada, including ON, QC, NS, MB, NB, PEI, or NL.

Pay Type

Full Time, Permanent

Compensation

$91,820 - $114,776

The listed base salary is just one component of our total rewards package, and performance-based or discretionary bonuses may be available

As a Principal, Identity & Access Management, YOU will experience:

• Working within one of the safest organizations in the industry where your safety and well-being are our most important priority
• Working for the best in class equipment dealer and with the premium Caterpillar brand
• Opportunities to continuously Learn, Grow and Develop with our Toromont team through our internal Training teams that are geared for your success
• Competitive total rewards including: wages, benefits, and premiums (as eligible)
• An opportunity for flexible work schedules and opportunities across multiple locations, from Manitoba to Newfoundland

In a typical day, YOU will:

• Lead the enterprise IAM strategy, reference architecture, standards, and multiâyear roadmap across IT and OT/ICS.
• Build and automate lifecycle management for human and nonâhuman identities (including AI and agent service accounts), with full JML automation and governance.
• Implement PAM for all privileged accounts with vaulting, JIT/JEA access, session controls, and secrets management.
• Deploy the IGA platform; define RBAC, personas, entitlements, access workflows, SoD controls, and certification processes.
• Establish enterprise SSO, MFA, conditional access, and federation standards aligned to Zero Trust.

Must-haves for this role:

• 8+ years IAM experience - Strong handsâon background across core IAM domains.
• Identity lifecycle & JML - Human and nonâhuman identity management expertise.
• IGA platforms - SailPoint, Saviynt, or Entra ID Governance; RBAC, personas, entitlements, access reviews, SoD.
• PAM tools - CyberArk, BeyondTrust, or Delinea; vaulting, JIT/JEA, session and secrets management.
• SSO/MFA & federation - SAML, OIDC, OAuth2, SCIM; conditional access (Entra ID/Okta/Duo).
• Machine/service identity governance - Workload, machine, and service-account controls, plus AI and agent service-account governance.
• Zero Trust - Strong grounding in least-privilege and identity-centric security.
• Audit & compliance - SOC, FSA and access certifications; audit evidence and reporting.

About Toromont Cat

With over 4,000 employees and 56 locations from Manitoba to Newfoundland, Toromont Cat has a proven track record, industry knowledge, dealership infrastructure, and service mindset to ensure our Construction, Mining, and Power Generation customers succeed. At Toromont Cat, work is built around people's strengths, our products, technology and an outstanding customer experience and through our strong partnership with Caterpillar ™,Toromont Cat takes care of our employees who take care of our customers! When you join ourteam, you become a member of the Toromont family. Your success is our success!

Artificial Intelligence (AI)

Please note that our hiring processes involve the use of artificial intelligence (AI) tools to assist with screening, assessing, or selecting candidates; all final decisions are reviewed by our Talent Acquisition team to ensure fairness and compliance with applicable laws