Senior IAM Engineer

Description

Ciklum is looking for a Senior IAM Engineer to join our team in Canada.

We are a custom product engineering company that supports both multinational organizations and scaling startups to solve their most complex business challenges. With a global team of over 4,000 highly skilled developers, consultants, analysts and product owners, we engineer technology that redefines industries and shapes the way people live.

About the role

As a Senior IAM Engineer, you'll become a part of a cross-functional development team engineering experience of tomorrow dedicated to building a modern control plane that governs access to our multi-cloud and hybrid environments.

This project focuses on developing and evolving a globally recognized digital agreement platform that enables secure electronic signatures and end-to-end document workflows. The platform is widely adopted by enterprises and individuals to manage mission-critical agreements in a fully digital, compliant, and secure environment.

Responsibilities

• Lead the migration of legacy on-premises identity operations to a cloud-native identity fabric using Microsoft Entra ID
• Design and automate identity lifecycles (JML), ensuring zero-touch provisioning and immediate de-provisioning workflows
• Architect and manage Identity as Code, including RBAC, Conditional Access, and PIM configurations using Terraform
• Engineer modern access controls such as Just-in-Time (JIT) access and Workload Identity Federation for Azure and GCP
• Partner with security and compliance teams to ensure all automated access activities are logged, monitored, and audited
• Document architecture decisions, automation logic, and operational runbooks for the identity platform

Requirements

We know that sometimes, you can't tick every box. We would still love to hear from you if you think you're a good fit

• Systems Design:
• 5+ years of experience in IAM, infrastructure, or security engineering
• Strong understanding of distributed identity systems and modern authentication protocols (OIDC, OAuth2, SAML)
• Experience designing automated workflows for user lifecycle management at scale
• Database & Infrastructure:
• Hands-on production experience with Microsoft Entra ID (App Registrations, Conditional Access, and PIM)
• Expertise in coding and automation (Python, Go, or PowerShell) using the Microsoft Graph API
• Experience deploying and operating identity configurations using Terraform and version control systems

What`s in it for you?

• Strong community: Work alongside top professionals in a friendly, open-door environment
• Growth focus: Take on large-scale projects with a global impact and expand your expertise
• Tailored learning: Boost your skills with internal events (meetups, conferences, workshops), Udemy access, language courses, and company-paid certifications
• Endless opportunities: Explore diverse domains through internal mobility, finding the best fit to gain hands-on experience with cutting-edge technologies
• Care: Healthcare, Basic Life Insurance, Short and Long-term disability insurance according to the Company’s Benefit Plans

About us

At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress. Now expanding across Canada, we’re looking for talented professionals to strengthen our North American footprint. Join us to innovate at scale and deliver world-class solutions to global clients.

Want to learn more about us? Follow us on Instagram, Facebook, LinkedIn.

Explore, empower, engineer with Ciklum

Interested already? We would love to get to know you Submit your application. We can’t wait to see you at Ciklum.