Security Developer, Identity and Access Management

Coveo; Montreal (administrative region); On-site; CAD 90,000 - 130,000; Full time

Job summary

Coveo is seeking a Security Developer for its Identity and Access Management (IAM) team in Montreal. You will build tooling and automation to secure and simplify access across the company, designing workflows, APIs, and self-service platforms for streamlined provisioning and compliance.

You will work with Okta and other identity providers, implement RBAC, SSO, SCIM and SAML capabilities, and collaborate with Security, IT, and platform teams to reduce friction while maintaining security at scale.

Qualifications

• 3+ years of software engineering experience with internal tooling, automation, or platform services.
• Proficiency in Python or another backend language, with experience building APIs and integrations.
• Experience with workflow orchestration and automated access management.

Responsibilities

• Build and maintain access request and approval workflows for system owners.
• Develop self-service tools (APIs/CLI/UI) to enable independent provisioning/deprovisioning of access.
• Design automated user lifecycle pipelines (onboarding/offboarding/role changes) integrating with HR and ID providers.
• Create audit logging and access review systems for compliance reporting across environments.
• Integrate IAM tooling with existing security platforms and collaborate across Security, IT, and platform teams.

Skills

Python

APIs

Workflows

RBAC

SSO

Tools

Okta

Microsoft Entra ID

SCIM

OIDC

SAML

Job description

Make access management seamless, secure, and self-service!

What if every access request could be fast, auditable, and automated without anyone chasing approvals? As a Security Developer on Coveo’s Identity and Access Management (IAM) team, you’ll build the tooling and automation that make secure access simple across the company.

You’ll design workflows, integrations, and self-service platforms that transform fragmented processes into a unified, developer-friendly experience. Your work will empower teams to manage access efficiently while strengthening security and compliance at scale.

As our Security Developer on the IAM team, you will:

• Build and maintain access request and approval workflows that empower system owners to manage access to their systems.
• Develop self-service tools, including application programming interfaces (APIs), command-line interfaces, and lightweight user interfaces, enabling IT Helpdesk and system owners to provision and deprovision access independently.
• Design automated user lifecycle pipelines for onboarding, offboarding, and role changes, integrating with human resources systems and identity providers such as Okta.
• Build audit logging and access review systems that provide unified visibility across corporate and research and development environments for compliance reporting.
• Integrate with existing security tools and platforms, building on shared infrastructure rather than creating parallel systems.
• Collaborate with Security Engineering, IT, and platform teams to reduce friction and make access management intuitive, secure, and scalable.

Here is what will qualify you for the role:

• 3+ years of software engineering experience, including hands-on experience building internal tooling, automation, or platform services.
• Proficiency in Python or another backend language, along with experience building APIs and integrations.
• Practical experience with workflow orchestration, approval systems, or business process automation.
• Familiarity with identity and access management concepts, including single sign-on (SSO), System for Cross-domain Identity Management (SCIM), role-based access control (RBAC), OpenID Connect (OIDC), and Security Assertion Markup Language (SAML), as well as cloud platforms and infrastructure as code.

What will make you stand out:

• Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation.
• Hands-on experience building developer self-service platforms or internal portals that abstract operational complexity.
• Familiarity with just-in-time access, time-bound permissions, zero standing privilege, privileged access management, or relevant security and identity certifications.

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact [e-mail] to discuss your needs.