IAM Engineer

Job Title: IAM Engineer

Location: Toronto, ON

Work Mode: Onsite

Employment Type: Full-Time

Experience: 5+ Years

• Design and implement Azure Entra  governance frameworks and access management solutions
• Configure and manage Privileged Identity Management (PIM) to enable just-in-time privileged access
• Implement and enforce Conditional Access policies, MFA, FIDO2, Passkeys, and phishing-resistant authentication methods
• Manage Azure RBAC role assignments across subscriptions, resource groups, and management groups
• Review and remediate guest user accounts, stale identities, excessive permissions, and access-related risks
• Configure, maintain, monitor, and secure Break Glass emergency access accounts
• Implement monitoring and alerting for privileged and emergency access activities
• Integrate Microsoft Defender for Cloud governance recommendations with Service Now ticketing workflows
• Support cross-cloud IAM alignment and access governance across AWS IAM and OCI IAM environments
• Participate in IAM audits, access reviews, identity governance assessments, and compliance reporting
• Develop and maintain IAM runbooks, RBAC mapping documentation, access procedures, and onboarding guides
• Support identity lifecycle management, access provisioning, deprovisioning, and access certification processes
• Analyze and implement Microsoft Defender for Cloud and Secure Score recommendations related to identity security
• Collaborate with security, infrastructure, application, compliance, and business teams to resolve IAM issues
• Ensure IAM solutions align with Zero Trust, security, governance, and organizational access control standards

• 5+ years of experience in Identity and Access Management, with 3+ years of hands-on Microsoft Azure / Entra
• Strong knowledge of Azure RBAC, PIM, Conditional Access, Entra , and identity governance
• Hands-on experience with MFA enforcement, authentication methods, access policies, and privileged access management
• Strong understanding of identity lifecycle management and access certification processes
• Experience with Microsoft Defender for Cloud and Secure Score recommendations
• Experience with Service Now or similar ticketing system integrations for IAM workflows
• Strong documentation, analytical, troubleshooting, and stakeholder communication skills
• Microsoft Certified:
  Identity and Access Administrator Associate (SC-300) certification is preferred

• Experience with AWS IAM, AWS Organizations, and Service Control Policies
• Knowledge of OCI IAM compartments, policies, and access structures
• Exposure to SASE and Zero Trust Network Access (ZTNA) frameworks