{"id":3655285,"url":"https://alion.io/job/randstad-canada-identity-and-access-management-security-designer","title":"Identity and Access Management Security Designer","company":{"id":19351,"name":"Randstad Canada","domain":"randstad.ca","url":"https://alion.io/company/randstad","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Design","role_family":"Design","seniority":null,"employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Quebec, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-02T14:58:13Z","employer_posted_date":null,"last_verified_at":"2026-11-02T14:58:13Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Randstad Digital is currently seeking a talented Identity and Access Management (IAM) Security Designer to partner with a premier enterprise organization in Canada known for delivering mission-critical digital services.\n\nIn this role, you will act as a subject matter expert and technical lead guiding the modernization, detailed design, and governance of enterprise identity platforms. Working at the intersection of architecture, security engineering, and infrastructure automation, you will translate macro-level roadmaps into robust, production-ready specifications. If you thrive on designing advanced conditional access mechanisms, automating deployments through Infrastructure as Code, and shaping resilient identity frameworks, this long-term engagement offers an exceptional environment to make a lasting impact.\n\nAdvantages\nLong-Term Engagement: Benefit from a stable, multi-year mandate running through March 2028.\n\nModern Work Model: Highly flexible remote-first environment with only very occasional on-site touchpoints in Montreal or Quebec City.\n\nBalanced Workweek: Standard 35-hour work schedule promoting a healthy work-life balance.\n\nTechnological Modernization: Hands-on leadership in modern cloud identity, IaC pipelines, and DevSecOps ecosystems.\n\nCollaborative Culture: Work alongside skilled architects, product owners, and engineering squads tackling sophisticated technical challenges.\n\nResponsibilities\nConvert architectural blueprints into detailed design documents, technical requirements, and configuration blueprints for scalable identity and authentication frameworks.\n\nArchitect, structure, and maintain enterprise conditional access rules, evaluating service dependencies and minimizing friction across user groups and applications.\n\nStandardize and automate tenant-level configurations via Terraform, championing Infrastructure as Code (IaC) principles and repeatable CI/CD deployment workflows.\n\nEstablish identity observability and monitoring strategies by leveraging log aggregation and analytics to streamline anomaly detection and root-cause analysis.\n\nConduct advanced triage for complex authentication issues and incident post-mortems, defining durable preventive controls.\n\nExecute proof-of-concept (PoC) initiatives to derisk technical unknowns prior to execution sprints.\n\nPartner with solution architects, product owners, and delivery squads to decompose user stories, map technical enablers, and maintain actionable engineering backlogs.\n\nAuthor and upkeep comprehensive technical documentation, design patterns, and operational standards to ensure platform long-term sustainability.\n\nPerform ongoing technological watch on evolving cloud identity features, modern authentication standards, and security automation trends.\n\nQualifications\nBachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or equivalent practical experience.\n\nOver 5 years of IT experience, highlighted by substantial involvement in enterprise Microsoft identity solutions.\n\nProven track record designing and configuring Microsoft Entra ID environments.\n\nDeep practical knowledge in constructing and managing Conditional Access policies.\n\nHands-on proficiency with Terraform and declarative IaC applied to identity and cloud resources.\n\nWorking knowledge of modern DevSecOps, build/release pipelines, and CI/CD tools.\n\nSolid skills in log analysis, telemetry, and querying tools (such as Azure Monitor, Log Analytics, and KQL).\n\nSound understanding of hybrid identity setups, directory synchronization, and modern application federation protocols.\n\nAnalytical thinker capable of communicating complex concepts across multidisciplinary teams with clarity.\n\nStrong proficiency in French (written and spoken) and working fluency in English.\n\nOur client operates in Canada. The company takes all reasonable steps to limit the number of positions in Quebec that require knowledge of a language other than French, and only requires it when necessary and its existing bilingual employees are unable to perform these duties. Based on an assessment conducted by our client, it has been determined that this position requires candidates to be fluent in English (both spoken and written). In particular, this position will require the employee to interact with centralized internal departments (e.g., Operations / HR / Finance / Legal / Contracts / Sales) that support the organization in Canada and that do not speak French.\n\nValued Assets:\n\nFamiliarity with endpoint identity integration, such as Microsoft Intune or Windows Hello for Business.\n\nAutomation experience leveraging PowerShell and Microsoft Graph API.\n\nExposure to Privileged Identity Management (PIM) and workload identities.\n\nRelevant industry certifications (e.g., Microsoft Certified: Identity and Access Administrator, Azure Administrator, or Security Engineer).\n\nSummary\nRole Type: Contract / Mandate (35 hours/week)\n\nContract Duration: November 2026 to March 31, 2028 (Multi-year)\n\nLocation: Remote / Hybrid (Montreal or Quebec City, with very occasional local meetings)\n\nOpenings: 1 position\n\nRandstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.\n\nRandstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to  to ensure their ability to fully participate in the interview process.","description_format":"text","description_chars":6505,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management"],"lifecycle":[{"event":"open","at":"2026-11-03T01:42:15Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":0,"expected_fill_days":22,"reasons":["seen:0","agency","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/randstad-canada-identity-and-access-management-security-designer","json_url":"https://alion.io/job/randstad-canada-identity-and-access-management-security-designer.json","meta":{"generated_at":"2026-11-03T21:06:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":127,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19351},"rest":"https://alion.io/mcp/rest/get_company?id=19351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frandstad-canada-identity-and-access-management-security-designer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frandstad-canada-identity-and-access-management-security-designer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frandstad-canada-identity-and-access-management-security-designer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/randstad-canada-identity-and-access-management-security-designer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frandstad-canada-identity-and-access-management-security-designer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3655285}},{"tool":"search_jobs","arguments":{"company":"randstad.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3655285},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}