Senior IAM Architect Tech and IT : Alberta Health Services · Calgary Open until filled

Alberta; Calgary; On-site; CAD 120,000 - 170,000; Full time

Job summary

Avenue.io Inc. in Canada is seeking a Senior IAM Architect to lead the enterprise identity and access management strategy, target architecture, and roadmaps for security and scalable access across clinical and corporate systems.

The role spans on-premises and cloud environments, defining RBAC/ABAC, SSO, MFA, PAM, and zero-trust controls while aligning with regulatory and privacy requirements. You will engage senior leaders and delivery teams to translate business needs into secure IAM solutions.

Responsibilities

• Strategy and architecture: Set IAM strategy, target architecture, standards and roadmap for IGA, authentication, directories and PAM; guide technology direction.
• Identity governance: Architect IGA, authoritative sources, lifecycle, provisioning/deprovisioning, access requests, entitlements, reviews and segregation of duties.
• Authentication and clinical access: Architect SSO, MFA, passwordless authentication and federation.
• Hybrid and non-human identity: Design hybrid identity across AD, Entra ID, directories and cloud providers, including synchronization, trust and application integration.
• PAM and Zero Trust: Architect PAM, credential vaulting, JIT and third‑party access; establish Zero Trust controls.
• Identity security and risk: Define IAM logging, audit, monitoring and SOC integration for identity threat detection and response.
• Leadership, automation and resilience: Lead architecture/design reviews; implement API-driven automation and IAM as Code across apps, ITSM and cloud.

Job description

Your Opportunity:

Health Shared Services (HSS) - Technology Services has an exciting opportunity for a highly skilled Senior Identity and Access Management (IAM) Architect to join the Technology Architecture & Solutions (TAS) team.The Senior IAM Architect will provide enterprise architectural leadership in designing, evolving and securing the organization's identity and access management capabilities. The position will play a key role in defining the enterprise IAM strategy, target architecture and technology roadmap, ensuring secure, reliable and efficient access to clinical and corporate systems across the organization.Working across on-premises, and public cloud environments, the Senior IAM Architect will establish architectural direction and standards for identity governance, authentication, access management, privileged access and hybrid identity services. The role will ensure alignment with enterprise architecture, cybersecurity, privacy, regulatory and operational requirements while enabling secure and seamless access to mission‑critical healthcare services.The successful candidate will bring extensive enterprise IAM architecture experience, strong technical knowledge of modern identity technologies and the ability to engage senior leaders, architects, vendors and operational teams to translate business and clinical requirements into secure, scalable and sustainable solutions.The TAS team provides architecture and solutions services across HSS Technology Services, including End User Devices, Unified Communications (Voice/Video), Network, Compute, Storage, Database, Identity and Access Management, Cloud, AI, Security Technical Controls and Facilities Technology, foundationally supporting clinical and corporate service delivery.

Description:

Senior IAM Architect is responsible for: Strategy and architecture. Set IAM strategy, target architecture, standards and roadmap for IGA, authentication, directories and PAM; guide technology direction. Identity governance. Architect IGA, authoritative sources, lifecycle, provisioning/deprovisioning, access requests, entitlements, reviews and segregation of duties. Define RBAC, ABAC and policy‑based access for workforce, clinical, affiliate and third‑party identities. Authentication and clinical access. Architect SSO, MFA, passwordless authentication and federation. Design clinical access covering tap‑and‑go, shared workstations, session management, clinician mobility and launch‑in‑context; define auditable break‑glass access. Hybrid and non‑human identity. Design hybrid identity across Active Directory, Entra ID, directories and cloud providers, including synchronization, trust and application integration. Define controls for service, application, workload and machine identities, credentials, certificates and secrets. PAM and Zero Trust. Architect PAM, including credential vaulting, session monitoring, JIT and third‑party access. Establish Zero Trust controls for least privilege, risk‑based access and continuous verification. Identity security and risk. Define IAM logging, audit, monitoring and SOC integration for identity threat detection and response. Embed cybersecurity, privacy, risk and regulatory requirements into IAM architecture and controls. Leadership, automation and resilience. Lead IAM architecture/design reviews, ensure alignment with standards and roadmaps, and guide delivery teams. Establish automation and integration using APIs, Identity‑as‑Code and Infrastructure‑as‑Code across applications, ITSM and cloud. Ensure IAM availability, resilience, disaster recovery and continuity for Apps access.