Senior Security Engineering Developer – Identity and Access Management (IAM)

Jobtailor; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Jobtailor is seeking an IAM Engineer to design, implement, and maintain secure authentication capabilities across enterprise applications in Toronto. You will integrate with Ping Identity, IBM ISAM, and LDAP/AD, and drive the rollout of Passkey (FIDO2/WebAuthn) and MFA with OAuth 2.0/OIDC token lifecycles.

Collaborating with security, architecture, and DevSecOps teams, you will apply Zero Trust principles, build secure REST APIs, and ensure scalable identity services for complex environments.

Qualifications

• Strong experience in Java/Spring Boot or equivalent backend technologies.
• Experience with Ping Identity, PingFederate, PingOne, IBM ISAM/ISVA, or similar IAM platforms.
• Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and token management.
• Experience implementing Passkeys (FIDO2/WebAuthn) and Multi-Factor Authentication (MFA).
• Strong knowledge of RESTful APIs, API security, and authentication patterns.
• Experience integrating enterprise directories (LDAP/Active Directory) and identity services.
• Good understanding of Zero Trust security principles and modern authentication architectures.

Responsibilities

• Design, develop, and maintain capabilities on the Unified Authentication Platform.
• Integrate enterprise IAM solutions such as Ping Identity, IBM ISAM, or similar authentication platforms.
• Develop and implement Passkey (FIDO2/WebAuthn) authentication and backend services.
• Build and integrate MFA capabilities, including adaptive authentication workflows.
• Develop secure REST APIs and manage OAuth 2.0/OIDC token lifecycles.

Skills

Java/Spring Boot

OAuth 2.0

OIDC

MFA

FIDO2/WebAuthn

SAML

JWT

RESTful APIs

Zero Trust

Token management

Tools

Ping Identity

IBM ISAM

LDAP

Active Directory

Job description

• Design, develop, and maintain capabilities on the Unified Authentication Platform.
• Integrate enterprise IAM solutions such as Ping Identity, IBM Security Verify Access (ISAM), or similar authentication platforms.
• Develop and implement Passkey (FIDO2/WebAuthn) authentication and associated backend services.
• Build and integrate Multi-Factor Authentication (MFA) capabilities, including adaptive authentication workflows.
• Develop secure REST APIs and integrate authentication services with enterprise applications. Implement and manage OAuth 2.0/OIDC token lifecycle, including token issuance, validation, refresh, and revocation.
• Integrate with enterprise security services, directories, and legacy authentication platforms such as IBM ISAM. Apply secure coding practices and security engineering principles to authentication and authorization services.
• Collaborate with architecture, application, and DevSecOps teams to deliver secure, scalable identity solutions.

Requirements

• Strong experience in Java/Spring Boot (or equivalent backend technologies).
• Experience with Ping Identity, PingFederate, PingOne, IBM ISAM/ISVA, or similar IAM platforms.
• Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and token management.
• Experience implementing Passkeys (FIDO2/WebAuthn) and Multi-Factor Authentication (MFA).
• Strong knowledge of RESTful APIs, API security, and authentication patterns.
• Experience integrating enterprise directories (LDAP/Active Directory) and identity services.
• Good understanding of Zero Trust security principles and modern authentication architectures.

Core Competencies

Demonstrates expertise in designing and implementing secure authentication solutions, including Multi-Factor Authentication (MFA) and Passkey (FIDO2/WebAuthn) integration. Proficient in developing REST APIs and managing OAuth 2.0/OIDC token lifecycles while applying secure coding practices.

Highest-signal resume keywords

• Java/Spring Boot
• Ping Identity
• OAuth 2.0
• Multi-Factor Authentication (MFA)
• RESTful APIs

ATS Optimization Keywords

Hard Skills

• Java
• Spring Boot
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML
• JWT
• RESTful APIs
• FIDO2/WebAuthn
• Multi-Factor Authentication (MFA)
• Secure Coding Practices

Industry Keywords

• Identity Access Management (IAM)
• Zero Trust Security
• Authentication Patterns
• Token Management
• Enterprise Security Services

Tools & Technologies

• Ping Identity
• IBM ISAM
• LDAP
• Active Directory