IAM Security Architect

Job Description

IAM Security Architect REMOTE (OTTAWA)

THIS CONTRACT HAS A TBD START DATE AND GOES TILL END OF DECEMBER 2027
(GREAT CHANCE OF EXTENSION)
LOCATION: REMOTE (THE CLIENT IS IN THE OTTAWA AREA)
LANGUAGE: ENGLISH
CLEARANCE: SECRET (MUST BE ELIGIBLE)
REFERENCES: 2

Mandatory Skills

• University Degree or College Diploma in computer science, information security, engineering, or a related field
• A minimum of five (5) years of recent demonstrated experience in information technology, identity and access management (IAM), or cyber security
• A minimum of three (3) years of recent demonstrated experience as an IAM architect, or identity security consultant in complex, regulated environments
• Demonstrated experience assessing current-state IAM capabilities and defining target-state IAM architectures and roadmaps
• Demonstrated experience designing and governing IAM controls, including identity governance, privileged access management, authentication, authorization, and Zero Trust identity capabilities
• Demonstrated experience identifying IAM, security, and compliance control gaps and recommending risk-based improvements
• Demonstrated experience developing IAM standards, reference architectures, design patterns, and governance frameworks
• Demonstrated Experience working in the financial sector or another highly regulated environment
• Demonstrated Experience with enterprise architecture methods or frameworks such as TOGAF, SABSA, or comparable approaches
• Relevant certifications would be considered an asset (e.g., CISSP, CISM, Microsoft, SailPoint, CyberArk, TOGAF, or SABSA)

The scope of work of the Contract includes, but is not limited to:

The IAM Security Architect professional will be expected to execute the following tasks during this contract, but not limited to:

• Provide senior Identity and Access Management (IAM) guidance, advisory, and architecture services to support Bank objectives and cyber resilience initiatives
• Develop the strategic direction, target-state architecture, and roadmap for IAM capabilities across the Bank
• Lead the advancement of Zero Trust identity principles across users, workloads, applications, devices, services, and AI-enabled solutions
• Create enterprise IAM architectures and governance models aligned with security, privacy, operational, and regulatory requirements
• Establish authentication, authorization, and access governance patterns leveraging Microsoft Entra ID, SailPoint, CyberArk, Azure Key Vault, and related technologies
• Establish standards and design patterns for identity governance, lifecycle management, access certification, entitlement management, and privileged access
• Develop the Bank's approach to non-human identities, including service accounts, workload identities, APIs, secrets, certificates, and machine-to-machine access
• Lead the development of agentic identity management capabilities and governance models to support secure adoption of AI agents
• Implement authorization models, lifecycle controls, monitoring requirements, and governance processes for AI agent identities
• Provide architectural oversight and technical guidance for IAM initiatives, ensuring alignment with enterprise architecture, Zero Trust principles, and strategic objectives
• Review and provide guidance with solution designs, implementation approaches, and technical deliverables produced by project teams and service providers
• Identify IAM capability gaps, technology risks, and control deficiencies, and develop remediation roadmaps
• Collaborate with cybersecurity, architecture, infrastructure, cloud, application, and data teams to embed identity controls into technology solutions and business processes
• Establish security requirements and architecture guidance for cloud identity, federation, privileged access, secrets management, and emerging technologies
• Assist in the development of identity threat detection, monitoring, and response capabilities to strengthen cyber resilience and enable machine-speed operations
• Produce architecture deliverables, standards, roadmaps, governance artifacts, and executive-ready recommendations for leadership and governance forums
• Provide expert guidance and knowledge transfer to internal teams supporting IAM initiatives
• Participate in the planning, prioritization, and delivery of IAM capabilities within the Cyber Resilience Transformation Program and broader Bank IAM initiatives
• Perform other related duties and deliverables as required

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.

This posting is for a public sector assignment. Compensation will be determined through the competitive bidding process and will be within the approved rate structure for this assignment.