Identity & Access Management Engineer

Identity & Access Management (IAM) Engineer – Permanent

Location: Richmond, BC – Hybrid

Salary: $96,929–$117,554 + Pension & Benefits

Employment: Full-Time, Permanent

Schedule: 36.25 hours/week

Onsite Requirements:

• First 30 days: 5 days onsite for onboarding.
• After 30 days: 3 days onsite (Wednesday–Friday).

About the Role

We are looking for a hands-on IAM Engineer to join a growing Cybersecurity team. You will design, implement and support modern identity and access management solutions, with a focus on CIAM, IGA and secure authentication.

Key Responsibilities

• Design and implement IAM, CIAM and IGA solutions.
• Configure SSO integrations using SAML, OIDC and OAuth 2.0.
• Support identity lifecycle management, provisioning and deprovisioning.
• Implement RBAC, birthright provisioning and SCIM integrations.
• Support privileged access management and identity governance initiatives.

Required Skills

• 4+ years of hands-on IAM experience.
• Experience implementing CIAM and/or IGA solutions.
• Strong knowledge of OAuth 2.0, PKCE, SAML and OIDC.
• Experience with identity provisioning, RBAC and lifecycle management.
• Familiarity with Ping Identity/ForgeRock, SailPoint, Microsoft Entra ID or PAM solutions.
• Must be a Canadian Citizen or Permanent Resident.

Benefits

• Defined-benefit pension plan.
• 4 weeks of vacation in the first year.
• Comprehensive health and dental coverage.
• Professional development opportunities.
• Relocation assistance up to $12,000 for eligible candidates.