IAM Security Architect

This is not a standard operational or administration role. Moving far beyond traditional user access, this position sits at the cutting edge of modern cybersecurity. You will have the unique opportunity to pioneer identity governance frameworks for AI agents (agentic identity), machine-to-machine workloads, and advanced cloud environments while executing a robust, enterprise-wide Zero Trust transformation.

Advantages
- Lead the industry by developing the lifecycle controls, authorization models, and governance processes required to securely adopt AI agents.
- Architect and design integration patterns using a premium, enterprise-grade suite: Microsoft Entra ID, SailPoint, CyberArk, and Azure Key Vault.
- Move away from minor operational tweaks. You will define the long-term target-state architecture, write the enterprise standards, and influence the institution's overarching cyber resilience posture.
- 100% Remote Stability: Enjoy the freedom of a fully remote setup combined with a secure, stable, long-term contract at an elite financial institution.

Responsibilities
- Provide senior Identity and Access Management (IAM) guidance, advisory, and architecture services to support enterprise objectives and cyber resilience initiatives.
- Develop the strategic direction, target-state architecture, and capability roadmap for IAM across the entire organization.
- Lead the advancement of Zero Trust identity principles across users, workloads, applications, devices, services, and AI-enabled solutions.
- Create enterprise IAM architectures and governance models aligned with security, privacy, operational, and regulatory requirements.
- Establish authentication, authorization, and access governance patterns leveraging Microsoft Entra ID, SailPoint, CyberArk, Azure Key Vault, and related technologies.
- Establish standards and design patterns for identity governance, lifecycle management, access certification, entitlement management, and privileged access.
- Develop the organization's approach to non-human identities, including service accounts, workload identities, APIs, secrets, certificates, and machine-to-machine access.
- Lead the development of agentic identity management capabilities and governance models to support the secure adoption of AI agents.
- Implement authorization models, lifecycle controls, monitoring requirements, and governance processes for AI agent identities.
- Review and provide technical guidance for solution designs, implementation approaches, and deliverables produced by project teams and external service providers.
- Identify IAM capability gaps, technology risks, and control deficiencies, and build actionable remediation roadmaps.
- Collaborate closely with cloud, infrastructure, application, data, and cybersecurity teams to seamlessly embed identity controls into technology solutions and business processes.
- Produce executive-ready recommendations, architecture deliverables, standards, and roadmaps for leadership and governance forums.

Qualifications
- Active Security clearance or eligiblity to obtain one.
- University Degree or College Diploma in computer science, information security, engineering, or a related field.
- Recent years of demonstrated experience in IT, IAM, or cyber security.
- Recent experience specifically as an IAM Architect or Senior Identity Security Consultant in complex, regulated environments.
- Proven track record assessing current-state capabilities and defining enterprise target-state IAM architectures and roadmaps.
- Extensive experience designing and governing IAM controls, including identity governance, privileged access management (PAM), authentication, authorization, and Zero Trust identity capabilities.
- Demonstrated experience identifying security/compliance gaps and developing reference architectures, design patterns, and governance frameworks.

Additional Assets (Nice-to-Have):
- Prior experience working within the financial sector or another highly regulated enterprise environment.
- Strong knowledge of enterprise architecture methods or frameworks, such as TOGAF or SABSA.
- Relevant professional certifications: CISSP, CISM, Microsoft, SailPoint, CyberArk, TOGAF, or SABSA.

Summary
If you meet the above-listed criteria, register for a Randstad account online if you have not yet registered, and please apply directly online. We appreciate all applicants and those interested in this opportunity, however, only those with relevant experience will be considered.

We look forward to hearing from you!

Randstad Canada is committed to building a diverse workforce reflective of the diversity of Canada. As a result, we promote employment equity and encourage candidates, especially those who identify as a woman, an Aboriginal person, a person with a disability or a member of a visible minority group, and any others who may contribute to the diversification of our workforce, to apply.

Randstad Canada is also committed to developing inclusive, barrier-free selection processes and work environments.If contacted in relation to a job opportunity, you should advise your Randstad Representative or your local Randstad branch in a timely fashion of the accommodation measures that must be taken to enable you to be assessed in a fair and equitable manner. Information received relating to accommodation measures will be addressed confidentially.

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.

This posting is for existing and upcoming vacancies.