Track Lead - IAM Service Delivery

HCL CANADA INC. (Fy HCL Axon Technologies Inc.); Canada; On-site; CAD 120,000 - 150,000; Full time

Job summary

HCL CANADA INC. (Fy HCL Axon Technologies Inc.) in Canada is seeking a Track Lead for IAM Service Delivery to steer project-focused engineering on ISAM-based SSO/MFA platforms and onboarding initiatives.

The role emphasizes design and implementation of authentication integrations, policy configurations, Azure AD integrations, and capacity enhancements within fixed scope, not BAU operations. You will collaborate with global teams to deliver secure identity solutions.

Qualifications

• Experience implementing ISAM-based SSO/MFA platforms.
• Strong knowledge of SAML, OAuth, and OpenID Connect.
• Proven ability to design and implement identity integrations with Azure AD/Entra ID.
• Experience in security architecture and authentication flows.

Responsibilities

• Application onboarding: design, build, test, and implement onboarding for B2E/B2B/B2C apps with ISAM SSO/MFA.
• ISAM/SSO solution engineering: configure authentication solutions and federations with multiple IdPs/Service Providers.
• MFA engineering: design and implement OTP, token, certificate, and risk-based MFA across web, VPN, and remote access.
• Authentication policy engineering: create MFA and conditional access policies aligned to standards.
• Azure AD/Identity Platform integration (ISAM context): onboard apps, MFA policies, and conditional access.
• Identity platform capacity & enhancement: scaling and capacity improvements for onboarding initiatives.
• Testing & implementation: perform integration/functional tests and validate security requirements before release.

Skills

ISAM

SSO Protocols

MFA Solutions

Azure AD

Federation

Identity Platform

Tools

IBM ISAM

Job description

Career Opportunities: Track Lead - IAM Service Delivery (185611)

Requisition ID185611-Posted10/26/2026

Job Responsibilities :

• 1. Application Onboarding (Primary Responsibility) Design, develop, test, and implement onboarding of: o B2E (Employee applications) o B2B / B2C / B2B2C applications Integrate applications into ISAM SSO/MFA platforms Configure federations using: o SAML 2.0 o OpenID Connect (OIDC) Perform end-to-end onboarding lifecycle including design, build, testing, and go-live
• 2. ISAM / SSO Solution Engineering Engineer and configure ISAM SSO authentication solutions Support: o Federation setup with multiple Identity Providers and service providers o Integration with enterprise and external applications Develop secure authentication flows for applications Ensure compatibility with enterprise identity architecture
• 3. MFA Engineering & Authentication Design Design and implement multi-factor authentication (MFA) solutions using ISAM: o OTP-based authentication o Token-based authentication o Certificate-based authentication o Adaptive/Risk-based authentication and device registration Implement authentication across: o Web applications o VPN / remote access o Internal and external access channels
• 4. Authentication Policy Engineering Create and configure: o MFA policies o Conditional access policies Enhance authentication security posture by: o Aligning policies to enterprise standards o Enforcing access controls for applications Implement policy updates as part of onboarding or new integrations
• 5. Azure AD / Identity Platform Integration (ISAM Context Only) Perform engineering work related to: o Application onboarding into Azure AD (as part of SSO ecosystem) o MFA enforcement policies o Conditional access configuration Configure AAD integrations with ISAM-based authentication flows
• 6. Identity Platform Capacity & Enhancement Work Support capacity-related engineering activities: o Identity platform scaling o Authentication system capacity improvements Perform design-level enhancements as part of onboarding or transformation initiatives
• 7. Testing & Implementation Conduct: o Integration testing o Functional/authentication testing o Validation of dependent use cases Ensure all onboarding implementations meet: o Security requirements o Authentication and Authorization standards before release

Explicit Activities Covered Under Fixed Capacity The role must include the following activities: Application onboarding to SSO/MFA identity platform Designing and implementing authentication integrations MFA policy creation Conditional access policy configuration Support for Azure AD onboarding and identity integration Identity platform engineering improvements

Job Summary : The ISAM Engineer will be responsible for engineering-focused activities under fixed capacity scope, primarily involving: Application onboarding into ISAM-based SSO/MFA platforms Design and implementation of authentication solutions Policy configuration and identity integrations This role is NOT operational/BAU, and focuses only on non-standard, project-based engineering work.

Key Responsibilities

NA

Skill Requirements

Skill Requirement : Technical Skills: IBM Security Access Manager (ISAM) – Mandatory SSO technologies: SAML, OAuth, OpenID Connect MFA implementations and authentication frameworks Identity federation and IdP integration Azure AD / Entra ID (integration level) Understanding of authentication flows and security architecture Engineering Skills: Application onboarding design and execution Identity solution architecture exposure Troubleshooting complex integration issues (L3-level engineering) Ability to design secure authentication workflows Deliverables (Measurable Outputs) Successful onboarding of applications into ISAM SSO/MFA platform Configured and tested authentication integrations MFA policies and conditional access implementations Secure authentication architecture for onboarded apps Tested and production-ready identity integrations