Senior Cyber Security IAM Specialist; design and deliver identity and access management capabilities Job Montréal area,Montreal Province

Position: Senior Cyber Security IAM Specialist (10+ years) to design and deliver identity and access management capabilities
Location: Montreal

Our financial services client is seeking a Senior Cyber Security IAM Specialist (10+ years) to design and deliver identity and access management capabilities

Join a confidential engagement supporting secure identity and access management initiatives within a national financial institution. This role leads the definition, documentation, and implementation of IAM processes, including privileged access, authentication, and cryptographic control improvements. The consultant contributes to high-impact security modernization efforts with visibility across cyber, architecture, and operations teams. This is a long-term contract supported under a protected and exclusive RFC process.

Initial 16-month contract with strong possibility of extension in Ottawa, ON (Hybrid candidates preferred, % remote options available).7.5 hours per day, Monday to Friday. Candidates who currently hold Government of Canada Secret clearance preferred, the selected candidate must have resided in Canada for the last 5+ years without leaving the country for 6 months continuously.

Responsibilities

Gather and analyze technical and non-technical requirements for IAM capabilities and control improvements

Define and document current-state and future-state IAM processes, dependencies, and control points

Design IAM use cases and support implementation to strengthen authentication and secrets management

Support development of control effectiveness metrics, traceability artifacts, and roadmap reporting inputs

Create end-user documentation, procedural guidance, and training materials for IAM adoption

Provide guidance to Cyber, IT, architecture, operations, and business teams on IAM objectives

Support planning for cryptographic inventory, algorithm transition, certificate impacts, and PQC readiness

Facilitate workshops and translate stakeholder needs into actionable requirements and user stories

Must Haves

Minimum 5 years in Cyber Security and information technology focusing on identity and access management (IAM)

Expertise in privileged access management
, Multi-Factor Authentication (MFA),
Public Key Infrastructure (PKI), and cryptographic controls

Experience translating risk
, compliance
, and architectural requirements into functional and non-functional specifications

Recent applied knowledge of post-quantum cryptography (PQC), algorithm transition planning, and enterprise crypto-agility concepts

University degree or college diploma in computer science, information security, risk management, or related field

Nice to Have

Demonstrated experience working with tools such as Sailpoint or Cyber Ark

Knowledge of cloud-based access controls including Conditional Access, SAML, and OATH/OIDC authentication

Understanding of Zero Trust principles and implementation patterns

Proficiency in business intelligence and reporting for control measurement and decision support

Experience using automation to streamline repetitive tasks and data analysis