Identity and Access Management Security Designer

In this role, you will act as a subject matter expert and technical lead guiding the modernization, detailed design, and governance of enterprise identity platforms. Working at the intersection of architecture, security engineering, and infrastructure automation, you will translate macro-level roadmaps into robust, production-ready specifications. If you thrive on designing advanced conditional access mechanisms, automating deployments through Infrastructure as Code, and shaping resilient identity frameworks, this long-term engagement offers an exceptional environment to make a lasting impact.

Advantages
Long-Term Engagement: Benefit from a stable, multi-year mandate running through March 2028.

Modern Work Model: Highly flexible remote-first environment with only very occasional on-site touchpoints in Montreal or Quebec City.

Balanced Workweek: Standard 35-hour work schedule promoting a healthy work-life balance.

Technological Modernization: Hands-on leadership in modern cloud identity, IaC pipelines, and DevSecOps ecosystems.

Collaborative Culture: Work alongside skilled architects, product owners, and engineering squads tackling sophisticated technical challenges.

Responsibilities
Convert architectural blueprints into detailed design documents, technical requirements, and configuration blueprints for scalable identity and authentication frameworks.

Architect, structure, and maintain enterprise conditional access rules, evaluating service dependencies and minimizing friction across user groups and applications.

Standardize and automate tenant-level configurations via Terraform, championing Infrastructure as Code (IaC) principles and repeatable CI/CD deployment workflows.

Establish identity observability and monitoring strategies by leveraging log aggregation and analytics to streamline anomaly detection and root-cause analysis.

Conduct advanced triage for complex authentication issues and incident post-mortems, defining durable preventive controls.

Execute proof-of-concept (PoC) initiatives to derisk technical unknowns prior to execution sprints.

Partner with solution architects, product owners, and delivery squads to decompose user stories, map technical enablers, and maintain actionable engineering backlogs.

Author and upkeep comprehensive technical documentation, design patterns, and operational standards to ensure platform long-term sustainability.

Perform ongoing technological watch on evolving cloud identity features, modern authentication standards, and security automation trends.

Qualifications
Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or equivalent practical experience.

Over 5 years of IT experience, highlighted by substantial involvement in enterprise Microsoft identity solutions.

Proven track record designing and configuring Microsoft Entra ID environments.

Deep practical knowledge in constructing and managing Conditional Access policies.

Hands-on proficiency with Terraform and declarative IaC applied to identity and cloud resources.

Working knowledge of modern DevSecOps, build/release pipelines, and CI/CD tools.

Solid skills in log analysis, telemetry, and querying tools (such as Azure Monitor, Log Analytics, and KQL).

Sound understanding of hybrid identity setups, directory synchronization, and modern application federation protocols.

Analytical thinker capable of communicating complex concepts across multidisciplinary teams with clarity.

Strong proficiency in French (written and spoken) and working fluency in English.

Our client operates in Canada. The company takes all reasonable steps to limit the number of positions in Quebec that require knowledge of a language other than French, and only requires it when necessary and its existing bilingual employees are unable to perform these duties. Based on an assessment conducted by our client, it has been determined that this position requires candidates to be fluent in English (both spoken and written). In particular, this position will require the employee to interact with centralized internal departments (e.g., Operations / HR / Finance / Legal / Contracts / Sales) that support the organization in Canada and that do not speak French.

Valued Assets:

Familiarity with endpoint identity integration, such as Microsoft Intune or Windows Hello for Business.

Automation experience leveraging PowerShell and Microsoft Graph API.

Exposure to Privileged Identity Management (PIM) and workload identities.

Relevant industry certifications (e.g., Microsoft Certified: Identity and Access Administrator, Azure Administrator, or Security Engineer).

Summary
Role Type: Contract / Mandate (35 hours/week)

Contract Duration: November 2026 to March 31, 2028 (Multi-year)

Location: Remote / Hybrid (Montreal or Quebec City, with very occasional local meetings)

Openings: 1 position

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.