Security Engineer II - Identity and Access Management

Role overview Build and operate identity security services for a cloud-based environment, with a focus on access governance, privileged access, and reducing standing permissions. You’ll work across cloud infrastructure, business applications, and engineering workflows to make access safer and easier to manage.

Responsibilities - Configure and maintain single sign-on, multi-factor authentication, account lifecycle processes, and application integrations. - Manage just-in-time privileged access for cloud and other sensitive resources, partnering with engineering teams to limit persistent privileges. - Improve access requests, approvals, and reviews to support least-privilege access and audit readiness. - Automate account changes and access reviews using scripts, APIs, and infrastructure-as-code. - Work with security, DevOps, and infrastructure teams to onboard applications and cloud accounts and resolve access issues. - Provide access evidence for compliance audits, document procedures, and contribute to operational runbooks.

Requirements - At least three years of related experience with a bachelor’s degree, two years with a master’s degree, or an equivalent combination of education and experience. - Hands-on experience with identity and access management tools such as Okta, Entra ID, CyberArk, Ping, or SailPoint. - Working knowledge of SAML, OAuth2/OIDC, SCIM, AWS identity roles and policies, least privilege, and role-based access control. - Scripting skills in Python, PowerShell, or similar languages, including using APIs to automate identity operations. - Familiarity with directory services such as Active Directory or LDAP, and frameworks such as NIST, SOC 2, or PCI DSS. - Clear communication and collaboration skills for working with technical and non-technical partners.

Nice to have - IAM-related certifications. - Experience with AWS services and permissions, DevOps practices, secrets management, or continuous integration and delivery pipelines.

Benefits and work setup - Remote work within Ontario or British Columbia, Canada. - Base salary range of CAD 104,000–130,000, with annual bonuses for eligible employees. - Health coverage options, flexible vacation and floating holidays, retirement contributions, equity, and remote-work and professional-development stipends. - Family-forming support and parental leave benefits.