Senior CIAM Engineer (Ping Identity) - Hybrid

Deloitte France; Toronto; Hybrid; CAD 69,000 - 114,000; Full time

Benefits offered by this job

Hybrid work structure

Mental health support benefits

Development and Innovation Days

Job summary

Deloitte Canada is seeking a Senior IAM Engineer to lead CIAM initiatives, focusing on identity management, access control, and authentication. You will work across global teams to secure Deloitte applications and implement future identity strategies.

The role requires hands-on Java development, Ping Identity tooling, and IAM product deployment with on-call responsibilities in a hybrid Toronto-based environment.

Qualifications

• Minimum 5 years’ CIAM experience with leading vendors, preferably Azure Entra Id and Ping Identity.
• Minimum 2 years’ hands-on Java development (Java/J2EE); Groovy/JavaScript familiarity.
• Proven experience customizing PingAM UI, scripting, and retrieving values from multiple data sources.
• Experience building Java components using PingAM and PingIDM SDK for production.
• Hands-on IAM/CIAM installation and configuration experience.
• Strong knowledge of SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Willingness to participate in a rotating 24x7x365 on-call schedule.
• Advanced LDAP/directory services, app servers, and network infra knowledge.
• Experience with SSO integrations for web/mobile apps.

Responsibilities

• In this role you’ll develop, implement and support systems that manage digital identities, access controls and authentication.
• Collaborate with team to ensure secure access to Deloitte applications and uphold cyber security best practices.

Skills

Ping Identity

Azure Entra ID

Java/J2EE

Groovy/JavaScript

PingIDM UI

IAM/CIAM

LDAP

OAuth2/OIDC

Docker

Kubernetes

Python

Shell scripting

Jenkins/Ansible

Linux/Unix

On-call

Education

BS/BA degree or equivalent experience

Tools

PingIDM SDK

PingAM UI

Docker

Kubernetes

Groovy/JavaScript

Jenkins

Ansible

Job description

Deloitte Canada is seeking a Senior IAM Engineer to lead CIAM initiatives, focusing on identity management, access control, and authentication. You will work across global teams to secure Deloitte applications and implement future identity strategies.

The role requires hands-on Java development, Ping Identity tooling, and IAM product deployment with on-call responsibilities in a hybrid Toronto-based environment.