Senior Identity and Access Management (IAM) Engineer

goeasy Ltd; Mississauga; Hybrid; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Senior IAM Engineer to join their dynamic team. This role offers the chance to design and implement cutting-edge identity and access management solutions that ensure the security of information systems. You will work closely with IT and business teams to manage user access and compliance, utilizing tools like Okta and BeyondTrust. The company prides itself on fostering a high-performance culture and offers an exciting, growth-oriented environment. If you are passionate about technology and eager to make a difference, this opportunity is perfect for you.

Benefits

RRSP match

Employee Share Purchase Plan

Annual bonus

Employee discounts

Company-paid volunteer days

24/7 healthcare

Flexible benefits package

On-site gym

Tuition Assistance Program

Internal development training programs

Qualifications

• 7+ years in IAM engineering with tools like Okta and BeyondTrust.
• Strong knowledge of SSO protocols and IAM governance.
• Proven skills in automating user provisioning and identity lifecycle management.

Responsibilities

• Design, deploy, and manage IAM systems including SSO and MFA.
• Architect and implement Okta solutions for user access management.
• Collaborate with IT to ensure compliance and security in IAM processes.

Skills

Identity and Access Management (IAM)

Okta

BeyondTrust

SailPoint

Auth0

Scripting (PowerShell, JSON, Python)

Single Sign-On (SSO)

Multi-Factor Authentication (MFA)

Identity Governance

Compliance Management

Education

Post-secondary education in Computer Engineering

Equivalent work experience

Tools

Okta Workflows

BeyondTrust

CIAM Solutions (Auth0, B2C)

Job description

Join one of Canada’s fastest-growing companies and be part of something extraordinary – welcome togoeasy! Atgoeasy, our people and culture are at the heart of everything we do, and we’re proud to be recognized for it. We’ve earned prestigious accolades such asWaterstone Canada’s Most Admired Corporate Cultures,Canada’s Top Growing Companies, and theTSX30, highlighting us as one ofthe top performers on the TSX. We’re also thrilled to be named aGreater Toronto Top Employerand proudly certified as aGreat Place to Work.These honors reflect our commitment to fostering an inclusive, high-performance culture where talent thrives and innovation drives us forward.

As one of Canada’s leading alternative consumer lenders, we’re passionate about helping everyday Canadians create a brighter future. Our vision is to provide a path to a better tomorrow, today. We offer a full range of products, including non-prime leasing, unsecured and secured loans, and point-of-sale financing througheasyhome,easyfinancial, andLendCare.

If you're seeking an exciting, high-growth environment where your contributions truly matter, we want to hear from you! Join us, and together, let's create a future of financial empowerment.

As a Senior IAM Engineer, you'll be responsible for designing, implementing, and supporting identity and access management solutions. Your deep understanding of IAM principles, technologies, and best practices will ensure the security and integrity of our information systems. You'll work closely with IT and business teams to make sure the right individuals have access to the right resources at the right times for the right reasons.

What will you be doing?

• Design, deploy, and manage IAM systems and services, including single sign-on (SSO), multi-factor authentication (MFA), user automated lifecycle management, and identity governance.
• Architect and implement Okta solutions to manage user identities and access across various applications and systems within the organization.
• Utilize Okta workflows to create and manage automated provisioning solutions for on-premises and SaaS-based applications.
• Develop and maintain automated processes for user provisioning and identity lifecycle management using programming languages like PowerShell, JSON, and Python.
• Manage, administer, and maintain the on-prem BeyondTrust environment, ensuring its integration and functionality within the broader IAM framework.
• Design and implement identity governance solutions to manage user access rights and ensure compliance with organizational policies and regulatory requirements.
• Design and implement CIAM solutions such as Auth0 and B2C to manage customer identities, ensuring seamless and secure access to digital products and services.
• Run periodic campaigns to conduct access reviews and audits to identify and remediate inappropriate access and ensure compliance.
• Collaborate with IT and business units to understand their access requirements and translate them into technical specifications.
• Develop and maintain IAM policies, procedures, and controls in accordance with regulatory and compliance requirements.
• Integrate BeyondTrust solutions with other security systems such as SIEM, multi-factor authentication, and identity management platforms.
• Troubleshoot and resolve IAM-related incidents and enhance system performance.
• Provide guidance and leadership to junior team members and act as an IAM subject matter expert within the organization.
• Stay current with emerging IAM technologies and trends to improve security posture and operational efficiency.
• Work with vendors and external partners to integrate third-party systems with the organization’s IAM framework.
• Document IAM processes and maintain detailed records of system configurations and changes.
• Participate in a rotation to deliver after-hours support for IAM solutions and technologies.

What experience do you have?

• Post-secondary education in Computer Engineering, Information Technology, Cybersecurity, or equivalent work experience.
• 7+ years in IAM engineering with tools like Okta, BeyondTrust, SailPoint, Auth0, and B2C.
• 5+ years in IAM governance, focusing on identity lifecycle management, access provisioning, reviews, and compliance.
• Strong knowledge of SSO protocols (SAML, OIDC, OAuth, WS-Federation).
• Extensive experience with Okta workflows for automated provisioning.
• Proven skills in automating user provisioning and identity lifecycle management using PowerShell, JSON, and Python.
• Strong knowledge of directory services, LDAP, Active Directory, and other identity repositories.
• Experience with scripting and automation to streamline IAM processes.
• Strong IT security and risk management practices.
• Excellent analytical, problem-solving, communication, and interpersonal skills.
• Availability for on-call duties and out-of-hours support.
• Preferred certifications: CISSP or IAM-specific certifications.

We offer a Flexible Work Program that provides you the ability towork three days onsite per week, from our Mississauga office.

Internal Applicants:please apply through the link and provide written endorsement from your current manager.

Why should you work for goeasy?

In keeping with our mission to create better tomorrows for our employees, each year goeasy commits to continuously enhancing its total rewards. Here are some of the perks we offer…

Financial Benefits:

• Leverage our RRSP match and Employee Share Purchase Plan programs.
• Annual bonus that rewards your hard work and dedication.
• Employee discounts on furniture, electronics, and appliances.
• MAT & PAT leave top-up.
• Expand your financial knowledge through engaging Financial Literacy Learning opportunities.

Health and Lifestyle:

• Enjoy company-paid volunteer days to give back to the community.
• Access 24/7 healthcare with Virtual Doctor Appointments.
• Personalize your benefits with a flexible modular benefits package.
• Stay fit and energized with exclusive access to our on-site private gym at our head office.

Employee Perks:

• Fuel your growth with the Tuition Assistance Program.
• Double the impact of your generosity with Company Matched Charitable Donations.
• Internal development training programs and platforms including job-specific training, career coaching, leadership excellence, mentorship, and many others.
• Enjoy a state-of-the-art office space with perks like a games room, a healthy snack program, a fitness studio, free gated parking, and more!

Diversity, Inclusion, and Equal Opportunity Employment:
At goeasy, we believe that we can only be the best when people are able to bring their best selves to work every day. This means that we are committed to cultivating and preserving a work culture where we celebrate who we are, where everyone feels seen and heard and where every employee can fulfill their potential. As an equal opportunity employer, we are committed to providing accommodations for applicants upon request at any stage of the recruitment process in accordance with all legislative requirements throughout Canada. Please let us know if you require an accommodation during any aspect of the recruitment process and we will work with you to address your needs.

Additional Information:
All candidates considered for hire must successfully pass a criminal background check, credit check, and validation of their work experience to qualify for hire. We thank all interested applicants, however we will only be contacting those for interview who possess the skills and qualifications outlined above.