Security Architect - Client and Workforce Identity (IAM)

ATB; Calgary; Hybrid; CAD 120,000 - 180,000; Full time

Job summary

ATB invites a Security Architect - Client and Workforce Identity (IAM) to shape identity and authentication across client-facing and internal systems. You will analyze complex problems, lead discussions with stakeholders, and advance cyber security practices to protect ATB's information assets.

The role emphasizes client identity, authentication, verification, consent, and fraud detection, along with workforce identity, privileged access, passwordless adoption, and governance.

Qualifications

• Seven+ years in IT with a focus on cyber security, architecture or related roles.
• Experience designing identity and access management solutions across client and workforce domains.
• Familiarity with Okta or Ping Identity and cloud security practices.

Responsibilities

• Develop identity solution architecture aligned with ATB policies and processes.
• Advocate for progressing identity maturity while balancing business and technical needs.
• Lead work on client identity: authentication, verification, consent management, and fraud detection.

Skills

IAM architecture

Cloud security

Identity platforms

Non-human identity

Threat modeling

Leadership

Communication

Education

IT degree or diploma

Professional designation (CISSP/CCSP/CISM)

Tools

Okta

Ping Identity

Google Cloud Platform

Google Cloud

Job description

At ATB, we exist to make it possible for our clients, team members and communities. Our purpose is more than aspirational. It's a real commitment we live every day through our values (what we call the ATB ID).

Life at ATB is about more than work. In fact, we’re consistently recognized as one of Canada's top employers thanks to our high-care, high-performance culture, upheld by the three commitments we make to our team members:

Impact in action: No matter where you are in the organization, you're empowered to make an impact in the lives of our clients and communities.

Thrive together: We want you—the unique, authentic you—to feel safe and celebrated at work. We're on a continuous journey to build the most flexible and inclusive programs.

Ready for tomorrow: We want to enable your success through interesting and challenging work, performance enablement, and learning and development.

About the role

As ATB’s next Security Architect - Client and Workforce Identity (IAM), you would be responsible for the design and maturity of client-facing and workforce identity and authentication practices within ATB. A successful candidate would be able to analyze complex problems, work with stakeholders in ATB as well as broader industry, lead discussions and improvements in cyber security practices, and directly contribute to the safe, secure and reliable operation of ATB information technology assets.

Accountabilities

• Develop identity solution architecture aligned with ATB policies and processes to secure ATB systems and data against threats; design, guide and recommend changes to security policies, standards and processes to help defend ATB assets, platforms, and tooling.
• Advocate for progressing identity maturity, while balancing the needs of business stakeholders, technical and operational landscape, emerging practices, and industry developments.
• This particular role would have a strong focus on client identity and related capabilities, such as authentication, identity management, identity verification, client experience, consent management, and fraud detection.
• This role would also have a focus on workforce identity, including hardened authentication practices, core directory services, privileged access, non-human identity, extended authentication (including federation and extending core identity platforms), identity governance, and work towards phishing-resistance factors and passwordless adoption.
• Work with stakeholders to develop strategy, roadmap, standards, patterns, and other documents in support of client or workforce identity capabilities.
• Assist teams to address identified cyber security issues to protect against unauthorized data access, disclosure, or associated disruption.
• Work collaboratively with CISO, security governance professionals, and other technology architects in the delivery of security services that have organization-wide impacts.
• Design, advise, and implement appropriate security control mechanisms across ATB assets and platforms to ensure they are protected according to security policies.
• Directly contribute to ATB projects with client authentication, including digital sales, client identity maturity, and authentication through multiple client engagement channels.
• Continuously deploy best practices, implement new policies, and embrace emerging trends to strengthen our strategic architecture roadmap.
• Lead proof of concept research and development in line with emerging industry trends.
• Collaborate with the broader architecture team to embed security into architectural design, including advisory on appropriate security standards or controls.
• Participate in the Cyber Security Incident Response Team for Cyber Security Incidents, as required.

Skills, experience & requirements

• General Skills:
  • Strong technical leadership and administration skills, with a demonstrated ability to lead change and solve problems.
  • Excellent communication and relationship-building skills, with a demonstrated ability to work effectively within both the business and technical arenas.
  • Well-developed analytical skills accompanied by proven decision-making experience.
  • Demonstrated aptitude for continuous learning and innovative thinking.
  • Excellent verbal and written communication skills, including polished presentation skills with the ability to deliver technical issues to both technical and non-technical audiences in a clear and understandable manner.
  • Ability to weigh several, often conflicting constraints and make rapid decisions in a dynamic environment.
• Technical Skills:
  • Technical cyber security background, with experience in system design, architecture, technology deployment, and security monitoring.
  • Experience with Identity & Access Management capabilities, including single sign on experiences, client identity, authentication, identity verification, and multi-factor authentication.
  • Working knowledge of identity platforms, such as Okta or Ping Identity.
  • Understanding of non-human identity best practices for use with AI and process automation workflows.
  • Experience designing High-Availability or High Traffic infrastructure with working knowledge of cloud services (cloud orchestration, multi-cluster, hybrid and multi modal).
  • Experience with leading security design and analysis tasks.
  • Cloud security experience required; Google Cloud Platform preferred.
  • Minimum of seven years of experience within the Information Technology industry; career focus in cyber security, architecture, or equivalent development or operational experience.
  • Formal information technology education, including a post-secondary degree or diploma.
  • Professional designation preferred, ex: CISSP, CCSP, or CISM.
  • Previous financial industry experience would be an asset.

Additional Details

This position has a hybrid work arrangement. On average, this means 1 day on-site per week. Please note that this is subject to change due to business priorities.

Don’t meet all the requirements on the list? A resume only goes so far in expressing who you are and the unique perspectives you bring. If you believe your skills and experience align with the role—but you might not check all the boxes,we want to hear from you. We encourage candidates from all work backgrounds, equity-seeking communities and experience levels to apply. If you’re seeking a career where your drive, perspective and growth are celebrated, we want to hear from you.

We’re dedicated to building a workforce reflective of those within our communities, and a culture where our team members are equipped with what they need to succeed—their way. Part of creating an inclusive workplace is recognizing our role in advancing Truth and Reconciliation. We are committed to meeting and exceeding the standards set out in the Partnership Accreditation in Indigenous Relations program created by the Canadian Council for Aboriginal Business.

Stay in touch We’re excited that you’re interested in a career with ATB. Follow us on LinkedIn, Facebook and Instagram to learn more about what our team is up to.