Identity Specialist II; Identity and Access Management - IAM Engineer II

Overview

Do you want to play a key role in securing identity for thousands of users across cutting‑edge CIAM and IGA platforms? As an Identity Specialist II, you will design and operate modern identity solutions using Forge Rock (Ping Identity), SailPoint, and Microsoft Entra , directly influencing how secure access is delivered across the organization. This role spans both Customer Identity (CIAM) and Workforce Identity (IGA) with a strong focus on authentication, authorization, user journeys, lifecycle management, and access governance.

Under the direction of the Manager, Cybersecurity Architecture & Compliance, you will analyze, design, implement and support new and existing CIAM and IGA platforms. You will act as a technical consultant to project teams, defining and evaluating new requirements, proposing and implementing solutions, addressing operational troubleshooting, and pursuing enhancements and improvements to existing CIAM, IGA and Azure SSO implementations. Your work will maintain the security and efficiency of WorkSafeBC’s business applications by safeguarding access to confidential data.

• Design and implement scalable IAM solutions across CIAM and IGA platforms (Forge Rock, SailPoint, Entra ).
• Partner with project teams to translate business requirements into secure, scalable identity solutions.
• Build and integrate identity lifecycle workflows, APIs, and connectors with enterprise and cloud applications.
• Enhance authentication and authorization controls, including SSO, MFA, privileged access attestation and Entra conditional access policies.
• Perform installation, configuration, troubleshooting, and development of custom APIs, user journeys, and connectors to enhance CIAM services; integrate CIAM solutions with enterprise applications and cloud services.
• Monitor and improve identity security posture using metrics such as Microsoft Secure Score and align controls with NIST security principles.
• Monitor the Incident Management System, report, investigate, and coordinate problem resolution efforts, ensuring documentation for tracking diagnosis and root cause analysis.
• Ensure that WorkSafeBC Identity and Access Management systems meet current and projected business requirements by identifying gaps, researching, evaluating, and making recommendations for the latest developments, participating in business case creation, and coordinating integration with business and technology goals.
• Consistently model the appropriate level of organizational behaviours expected of all WorkSafeBC employees: responsive, respectful, fair, collaborative, accountable, and forward‑thinking.

• Strong problem‑solving skills in complex identity and authentication scenarios.
• Ability to design secure, scalable identity architectures.
• Experience balancing security, usability, and performance in IAM solutions.
• Effective collaboration with developers, architects, and business stakeholders.
• Continuous learning mindset in evolving identity standards and threats.
• Anticipate, organize, and prioritize work to meet both short‑ and long‑term goals.

• A bachelor's degree in computer science or a STEM (science, technology, engineering, math) field.
• A minimum of three years of hands‑on experience implementing IAM solutions, including:
• SSO integration (SAML, OAuth, OIDC)
• Identity lifecycle and provisioning
• Application integration and connector development

• Technical specialist knowledge of IAM platforms:
  Forge Rock, SailPoint, and Microsoft Entra  an equivalent enterprise IAM product.
• Authentication protocols: OAuth 2.0, OIDC, SAML 2.0.
• Directory services:
  Active Directory, Entra .
• Access controls:
  Conditional Access, MFA, Zero‑Trust principles.
• Privileged access management (PAM) solutions.
• API and integration development (REST, JSON).
• Cloud platforms (Azure preferred).
• Security frameworks (NIST, Zero‑Trust, defense‑in‑depth).

• Defined benefit pension plan that provides a lifetime monthly pension when you retire.
• Three weeks of vacation in your first year, with regular increases based on years of service.
• Extensive health care and dental benefits.
• Optional leave and earned‑time‑off arrangements.
• Development opportunities (tuition reimbursement, leadership development, and more).

Salary: $48.46–$58.78 hourly

• Consent to a criminal record check.
• Confirm you are legally entitled to work in Canada.