Senior Security Engineering Developer / Identity and Access Management (IAM) (Hybrid Toronto)

1 мес. назад

CanadaWorldwideSeniorHybrid

oauth 2.0openid connectfido2webauthnrest apimulti-factor authenticationping identityibm isam

Develop and maintain secure authentication capabilities on an enterprise Unified Authentication Platform focusing on IAM, MFA, and secure API integrations.

Условия

Deliver high-impact technology solutions for Tier 1 financial institutions
Work in a collaborative, flat, and entrepreneurial consulting culture
Access continuous learning, training, and industry certifications
Be part of a team shaping the future of digital financial services
Help shape the future of digital transformation across FS & Energy.
Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
Virtual Health Care – Company-paid program available to all employees and their dependents/partners
Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
Wellness Support – Fitness reimbursement benefit to promote health and well-being
Business Coach from Day 1: Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at .

Другое

Build secure, scalable backend solutions that protect the world's leading financial institutions.  
The Role  
is seeking a Security Engineering Developer to design, develop, and enhance enterprise authentication capabilities on a Unified Authentication Platform. The role will focus on integrating modern Identity and Access Management (IAM) solutions such as Ping Identity (or equivalent), implementing passwordless authentication, MFA, token services, and secure API integrations to deliver scalable, secure, and seamless authentication experiences.
What You'll Do  
Design, develop, and maintain capabilities on the Unified Authentication Platform.
Integrate enterprise IAM solutions such as Ping Identity, IBM Security Verify Access (ISAM), or similar authentication platforms.
Develop and implement Passkey (FIDO2/WebAuthn) authentication and associated backend services.
Build and integrate Multi-Factor Authentication (MFA) capabilities, including adaptive authentication workflows.
Develop secure REST APIs and integrate authentication services with enterprise applications. Implement and manage OAuth 2.0/OIDC token lifecycle, including token issuance, validation, refresh, and revocation.
Integrate with enterprise security services, directories, and legacy authentication platforms such as IBM ISAM. Apply secure coding practices and security engineering principles to authentication and authorization services.
Collaborate with architecture, application, and DevSecOps teams to deliver secure, scalable identity solutions.
 
What We're Looking For  
Strong experience in Java/Spring Boot (or equivalent backend technologies).
Experience with Ping Identity, PingFederate, PingOne, IBM ISAM/ISVA, or similar IAM platforms.
Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and token management.
Experience implementing Passkeys (FIDO2/WebAuthn) and Multi-Factor Authentication (MFA).
Strong knowledge of RESTful APIs, API security, and authentication patterns.
Experience integrating enterprise directories (LDAP/Active Directory) and identity services.
Good understanding of Zero Trust security principles and modern authentication architectures.
At , we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.
We offer a competitive, people-first benefits package designed to support every aspect of your life:
We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At , we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
#LI-hybrid
 
 
 
 
Pay Transparency
The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.
 
is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.                                                  &n