Senior Cyber Security IAM Specialist (10+ years) to design and deliver identity and access mana[...]

Overview

Our financial services client is seeking a Senior Cyber Security IAM Specialist (10+ years) to design and deliver identity and access management capabilities. Join a confidential engagement supporting secure identity and access management initiatives within a national financial institution.

This role leads the definition, documentation, and implementation of IAM processes, including privileged access, authentication, and cryptographic control improvements.

The consultant contributes to high‑impact security modernization efforts with visibility across cyber, architecture, and operations teams.

This is a long‑term contract supported under a protected and exclusive RFC process. Initial 16‑month contract with solid possibility of extension in Ottawa, ON (Hybrid candidates preferred; % remote options available). 7.5 hours per day, Monday to Friday.

Candidates who currently hold Government of Canada Secret clearance preferred; the selected candidate must have resided in Canada for the last 5+ years without leaving the country for 6 months continuously.

Responsibilities

• Gather and analyze technical and non‑technical requirements for IAM capabilities and control improvements.
• Define and document current‑state and future‑state IAM processes, dependencies, and control points.
• Design IAM use cases and support implementation to strengthen authentication and secrets management.
• Support development of control effectiveness metrics, traceability artifacts, and roadmap reporting inputs.
• Create end‑user documentation, procedural guidance, and training materials for IAM adoption.
• Provide guidance to Cyber, IT, architecture, operations, and business teams on IAM objectives.
• Support planning for cryptographic inventory, algorithm transition, certificate impacts, and PQC readiness.
• Facilitate workshops and translate stakeholder needs into actionable requirements and user stories.

Qualifications

• Minimum 5 years in Cyber Security and information technology focusing on identity and access management (IAM).
• Expertise in privileged access management, multi‑factor authentication (MFA), public key infrastructure (PKI), and cryptographic controls.
• Experience translating risk, compliance, and architectural requirements into functional and non‑functional specifications.
• Recent applied knowledge of post‑quantum cryptography (PQC), algorithm transition planning, and enterprise crypto‑agility concepts.
• University degree or college diploma in computer science, information security, risk management, or related field.

Nice to Have

• Demonstrated experience working with tools such as Sailpoint or CyberArk.
• Knowledge of cloud‑based access controls including conditional access, SAML, and OATH/OIDC authentication.
• Understanding of Zero Trust principles and implementation patterns.
• Proficiency in business intelligence and reporting for control measurement and decision support.
• Experience using automation to streamline repetitive tasks and data analysis.