IAM Security Architect

Position Title: IAM Security Architect

Position Type: Regular - Full-Time ​

Position Location: Florenceville GTC

Requisition ID: 35470

We are seeking a talented and driven IAM (Identity and Access Management) Security Architect to join our team. As an IAM Security Architect, you will be responsible for designing and managing identity and access management solutions that align with the McCain cybersecurity objectives and security requirements.

You will be someone with deep expertise in identity management, access governance, federation, cloud services, IAM solutions, web security, and cloud access management. The ideal candidate should possess strong technical skills and the ability to effectively communicate with business end users, technical IT teams, business partners, network providers, and business process outsourced vendors in a global business environment.

Responsibilities:

• Design, develop, and manage the company's IAM architecture.
• 10+ years of experience in IAM solution designs, technical consulting, client problem-solving, architecting, and implementing solutions.
• 7+ years of hands-on experience implementing and transforming enterprise-wide Identity and Access Management (IAM) services, specializing in IGA, PAM, SSO, SaaS platforms, and API development.
• Deep expertise in IAM protocols: SCIM, Web Services, WS-Fed, SAML, OpenID Connect, and OAuth.
• At least one full deployment of Implementing and configuring SailPoint or Saviynt, CyberArk or any other PAM tool and an SSO solution.
• Deep technical knowledge of MS Active directory and Azure AD / Entra ID.
• Deployment of IAM solutions in on-prem and SaaS environments.
• Collaborate with stakeholders to understand business requirements and design IAM solutions that meet security, compliance, and operational needs.
• Lead the implementation of IAM security solutions, including identity lifecycle management, access provisioning, authentication, authorization, and single sign-on.
• Support internal customers with their Enterprise and Cloud Cyber security needs, specifically helping them address IAM maturity and navigate the journey to the deployment of an IGA solution.
• Assist in transformation and development activities such as defining scope of services, building solution designs, and providing related support for project delivery.
• Implement identity governance and administration functionalities using an IGA tool like SailPoint, Saviynt, Oracle or other.
• Expertise in IAM industry standards, enterprise architecture, and API service design.
• Implement and manage solution designs for IGA, PAM, SSO, MFA, and User Provisioning / Deprovisioning across various platforms and systems.
• Collaborate with various teams to understand business requirements, design appropriate solutions, and implement them within the current architecture.
• Develop and maintain technical documentation related to IGA configurations and workflows.
• Review and oversee all technical deliverables to ensure they meet standards and expectations.
• Lead engagements to perform technical health checks for IAM platforms/environments before broader deployments.
• Solid knowledge of web technologies, including web services, web applications, Service-Oriented Architectures, and network/web protocols.
• Experience in leading workshops/discussions with internal customers and vendor teams to integrate both cloud apps and on-premises applications.
• Experience with security protocols such as LDAP-S, SAML, SCIM, OAuth, and OIDC.
• Sound knowledge of procedures, standards, and regulations for authorization and authentication.
• Experience of dealing with architectural review board for the approval of IAM solutions.
• An analytical mind with a problem-solving attitude.
• Excellent organizational and communication skills.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven work experience as an IAM Architect or in a similar role.
• Extensive experience with IAM solutions and technologies.
• Strong understanding of identity management, role-based access control, and authentication systems.
• Requirement analysis, key architecture decisions, API specifications, solution architecture, and data modeling for the IAM platform.
• Providing engineering designs and guiding the IAM development team on building new integrations/solutions.
• Familiarity with IT security principles, architecture, and strategy.
• Understanding of compliance regulations and security standards.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate) are a plus.
• Hands-on experience in implementing and IGA tools like SailPoint or Saviynt is a must-have.
• Ensuring software security at all levels of architecture.
• Excellent verbal and written communication skills.

#LI-McCain2025

Compensation Package: $102,700.00 - $137,000.00 CAD annually + bonus eligibility

The above reflects the target compensation range for the position at the time of posting. Hiring compensation will be determined based on experience, skill set, education/training, and other organizational needs.

Benefits: At McCain, we're on a mission to create a winning culture that puts employee safety and wellbeing at the heart of what we do, every day. We understand and appreciate that each person's needs are unique and ensure our benefits & wellbeing programs reflect that. Employees are eligible for the following benefits: health coverage (medical, dental, vision, prescription drug), retirement savings benefits, and leave support including medical, family and bereavement. Wellbeing programs include vacation and holidays, company-supported volunteering time, and mental health resources. Coverages are aligned to country, provincial and state governing plans and can vary by work level, location and nature of the role. Additional benefit details available during the application process.

Your well-being matters to us, and we're here to provide you with the necessary resources to support you in being your best self at work — and at home.

McCain Foods is an equal opportunity employer. We see value in ensuring we have a diverse, antiracist, inclusive, merit-based, and equitable workplace. As a global family-owned company we are proud to reflect the diverse communities around the world in which we live and work. We recognize that diversity drives our creativity, resilience, and success and makes our business stronger.

McCain is an accessible employer. If you require an accommodation throughout the recruitment process (including alternate formats of materials or accessible meeting rooms), please let us know and we will work with you to meet your needs.

Your privacy is important to us. By submitting personal data or information to us, you agree this will be handled in accordance with the Global Privacy Policy

Job Family: Information Technology
Division: Global Digital Technology
Department: ​Identity and Access Management ​
Location(s): CA - Canada : New Brunswick : Florenceville-Bristol

Company: McCain Foods (Canada)