Senior IAM and API Security Developer

Our client, a prominent Canadian institutional leader in the financial services and insurance sector, is actively transforming and modernizing its enterprise security architecture. As part of a major strategic initiative to overhaul access governance, they are seeking a Senior IAM & API Security Developer to play a pivotal role in the modernization of their identity, credentialing, and access authorization ecosystem.

In this role, you will be instrumental in architecting and delivering pilot implementations that showcase automated, self-service access authorization across distributed IT environments. You will bridge modern identity protocols with enterprise microservices, building scalable, automated pipelines that empower internal development teams to consume advanced authorization services seamlessly.

Advantages
Long-Term Engagement: Stable multi-year contract opportunity running through March 2028.

Flexible Work Arrangement: Primarily remote model with very occasional team touchpoints in Montreal or Quebec City.

Balanced Workweek: Standard 35-hour work schedule promoting a healthy work-life balance.

Cutting-Edge Stack: Hands-on exposure to cloud identity, automated access control, Infrastructure as Code, and modern API security.

Impactful Mission: Drive large-scale enterprise modernization in an organization placing digital trust and cybersecurity at the core of its business.

Responsibilities
Pilot Design & Delivery: Prototype and deliver end-to-end authorization pilot solutions, configuring access management suites, establishing mock demo clients, and overseeing end-to-end token issuance, exchange, and validation lifecycles.

Front-End & API Integration: Build functional proof-of-concept user interfaces in React to model token enrichment and user journeys; interface authorization flows with API gateways (such as Flex Gateway or MuleSoft) and .NET back-end services handling real-time policy evaluation.

Protocol & Token Management: Implement and test robust token patterns, including On-Behalf-Of workflows, claims augmentation, multi-claim structures, and token swapping under OAuth 2.0, OpenID Connect, and JWT frameworks.

DevOps & Automation: Structure enterprise repositories to deliver self-service integration frameworks; automate provisioning and CI/CD pipelines leveraging Terraform and Infrastructure-as-Code principles.

Cross-Functional Collaboration: Partner with Enterprise Architects and Product Owners to define technical roadmaps, untangle system dependencies, author technical design patterns, and provide comprehensive documentation to accelerate broad developer adoption.

Qualifications
Extensive hands-on background in developing and integrating enterprise Identity and Access Management (IAM) architectures, access controls, and authentication mechanisms.

Deep technical command of OAuth 2.0, OpenID Connect (OIDC), JWTs, token life cycles, claims transformation, scopes, and API client security.

Proven expertise deploying and configuring modern Identity-as-a-Service platforms (specifically Okta / Okta API Access Management).

Practical experience building integration layers and debugging end-to-end flows across .NET APIs, API gateways, and downstream legacy systems.

Strong experience in Infrastructure as Code (Terraform) and CI/CD pipeline automation within DevOps/DevSecOps environments.

Working proficiency with React to develop front-end integration demos and test clients.

Excellent autonomy, problem-solving acumen, and ability to convert functional business security requirements into concrete technical proofs-of-concept.

Assets: Familiarity with MuleSoft/Flex Gateway, containerized environments (Kubernetes), Microsoft Entra ID, policy engines (OPA, ABAC/RBAC), Salesforce integrations, or legacy gateway migrations (e.g., Layer7).

Language proficiency: Fluent French and intermediate English.

Our client operates in Canada. The company takes all reasonable steps to limit the number of positions in Quebec that require knowledge of a language other than French, and only requires it when necessary and its existing bilingual employees are unable to perform these duties. Based on an assessment conducted by our client, it has been determined that this position requires candidates to be fluent in English (both spoken and written). In particular, this position will require the employee to interact with centralized internal departments (e.g., Operations / HR / Finance / Legal / Contracts / Sales) that support the organization in Canada and that do not speak French.

Summary
Role Type: Full-time contractual mandate (35 hours/week)

Contract Duration: November 2026 to March 31, 2028 (Multi-year)

Location: Remote / Hybrid (occasional visits to offices in Montreal or Quebec City)

Compensation: Competitive, aligned with market rates and candidate expertise

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [email protected] to ensure their ability to fully participate in the interview process.