Identity & Access Management Lead (Contract)

Identity & Access Management Lead (Contract)

ascio is hiring an Identity & Access Management Lead to support our identity security, architecture and access governance work.

This role will assess enterprise identity environments, review identity and access management processes and technologies, define requirements and develop practical recommendations and implementation roadmaps.

Responsibilities

1. Assess enterprise identity architecture, directory services and identity platform configurations.
2. Review joiner, mover and leaver processes and associated access controls.
3. Assess privileged access management processes and technologies.
4. Review role-based access control models, access governance and entitlement management.
5. Assess Microsoft Entra ID, Active Directory and related identity services.
6. Review federation, authentication and single sign-on arrangements across organizational boundaries.
7. Evaluate identity governance and administration technology options.
8. Define functional and technical requirements for IAM improvements.
9. Develop implementation roadmaps with sequencing, dependencies and priorities.
10. Prepare clear findings and recommendations for technical and executive audiences.

Required Skills and Experience

1. Ten or more years of experience in identity and access management.
2. Strong experience assessing enterprise identity architectures.
3. Experience designing or assessing joiner, mover and leaver processes.
4. Strong privileged access management experience.
5. Practical experience with role-based access control and access governance.
6. Deep knowledge of Microsoft Entra ID and Active Directory.
7. Experience with federation, authentication and single sign-on technologies.
8. Knowledge of identity assurance concepts and NIST SP 800-63.
9. Experience assessing or implementing identity governance and administration solutions.
10. Ability to translate complex identity issues into practical technical and business recommendations.
11. Strong written and verbal communication skills.

Qualifications

1. One or more current professional or technical certifications relevant to identity, cloud or information security.
2. Relevant certifications may include CISSP, CISM, Microsoft Identity and Access Administrator, SailPoint, Okta or comparable IAM credentials.
3. Applicants must be able to provide certification status and expiry or renewal dates, where applicable.
4. Degree in computer science, information systems or a related field, or equivalent professional experience.
5. Cloud platform certifications are considered assets.

Preferred Experience

1. Large or complex identity environments.
2. Identity environments with high user turnover or complex workforce populations.
3. Multi-factor authentication in constrained or low-connectivity environments.
4. Identity governance technology implementation.
5. Zero Trust architecture.
6. Cloud identity and hybrid identity environments.
7. IAM roadmap and modernization programs.
8. Experience assessing IAM controls against security or compliance frameworks.

Location and Work Arrangement

1. Remote within Canada.
2. Some assignments may require occasional onsite work or travel within Canada.
3. Applicants must be based in Canada and legally entitled to work in Canada.
4. A criminal record check may be required before access to sensitive systems, information or environments.