Position Description:

Join a purpose driven winning team, committed to results, in an inclusive and high performing culture.

Contributes to the overall success of the Enterprise Customer Identity & Access Management (CIAM) Engineering function by ensuring that engineering initiatives, delivery plans, and strategic goals are executed effectively. The role ensures compliance with regulatory and internal policy requirements while championing customer focused engineering and reliable identity services across the enterprise.

This role is hybrid and requires you to be at our downtown Toronto and/or Client office at a minimum 3 days per week subject to change at any time.

Your future duties and responsibilities:

• Drive the hands on engineering, configuration, and integration of CIAM solutions that support enterprise security strategies, reliability standards, and digital identity modernization goals.

• Implement, maintain, and continuously improve CIAM capabilities and supporting services.

• Design and implement CIAM frameworks aligned with organizational security standards and regulatory requirements.

• Develop and apply best practices for identity federation, SSO, MFA, OAuth2/OIDC flows, and adaptive authentication.

• Ensure CIAM engineering work meets regulatory, compliance, and security requirements across channels and geographies.

• Support onboarding, integration, and expansion of digital channels into CIAM platforms, ensuring stable and secure implementations.

• Perform risk assessments and technical security reviews for CIAM integrations and recommend mitigation strategies.

• Continuously refine and enhance deployment processes, onboarding workflows, and implementation guidelines.

• Collaborate closely with internal engineering, product, security, and operations teams to ensure smooth and efficient adoption of CIAM services.

• Provide expertise, guidance, and documentation to engineering teams and partner groups to support optimal use of CIAM platforms.

• Create and maintain technical documentation, including architecture diagrams, configuration guides, troubleshooting guides, and operational procedures.

• Establish effective working relationships across multiple technology and business partners, project teams, and stakeholders.

• Understands how the Bank's risk appetite and risk culture should be considered in day to day activities and decisions.

• Champion a customer focused engineering mindset and contribute to a collaborative and inclusive work environment.

Required qualifications to be successful in this role:

• 7+ years of hands on experience on microservice implementation using Java/J2EE, Spring framework, Gradle, NodeJS, Restful APIs, Cloud SQL, and Kafka.

• 5+ years of hands on experience with major CIAM platforms, specifically ForgeRock (AM, IDM, DS), Ping Identity (PingFederate, PingAccess, PingDirectory), with exposure to Okta an asset.

• 5 years of experience in automating deployment processes and working with CI/CD tools (Jenkins, Google Cloud Deployment, etc.).

• Strong understanding of authentication and authorization protocols such as OAuth2, OpenID Connect, SAML, LDAP.

• Proven ability to design and implement IAM solutions for enterprise and cloud environments (AWS, Azure, GCP).

• Experience with identity federation, SSO, MFA, and adaptive authentication strategies.

• Proficiency in DevOps tools (Terraform, CI/CD pipelines) for IAM deployment and automation.

• Solid knowledge of cybersecurity principles, risk management, and compliance frameworks.

• Excellent problem solving and troubleshooting skills for complex IAM integrations.

• Strong work ethic and reliability.

• Excellent communication and time management skills.

• Experience delivering training using virtual conferencing.

• Ability to develop technical documentation, including architecture diagrams, configuration guides, and operational procedures.

• Ability to prepare communications, briefings, and technical summaries for senior stakeholders when required.

• Proven success working within a matrix organization and collaborating across cross functional teams.

• Strong prioritizing, planning, analytical, presentation, project/change management, and relationship building skills.

**CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes factors such as skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions depend on the facts and circumstances of each case. A reasonable estimate of the current range is $95,000–$145,000. This role is an existing vacancy.

#LI-BN

Skills:

• Azure

• Financial Services

• Google Cloud Platform

• Gradle

• Java

• Jenkins

• Node.Js

• RESTful (Rest-APIs)

• Software Architecture

• Spring

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team—one of the largest IT and business consulting services firms in the world.