{"id":3655284,"url":"https://alion.io/job/randstad-canada-senior-iam-and-api-security-developer","title":"Senior IAM and API Security Developer","company":{"id":19351,"name":"Randstad Canada","domain":"randstad.ca","url":"https://alion.io/company/randstad","size_band":null,"is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Quebec, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MuleSoft","optional":false},{"name":"Okta","optional":false},{"name":"Terraform","optional":false},{"name":"Apex","optional":true},{"name":"C#","optional":true}],"status":"live","first_seen_at":"2026-11-02T15:06:10Z","employer_posted_date":null,"last_verified_at":"2026-11-02T15:06:10Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Our client, a prominent Canadian institutional leader in the financial services and insurance sector, is actively transforming and modernizing its enterprise security architecture. As part of a major strategic initiative to overhaul access governance, they are seeking a Senior IAM & API Security Developer to play a pivotal role in the modernization of their identity, credentialing, and access authorization ecosystem.\n\nIn this role, you will be instrumental in architecting and delivering pilot implementations that showcase automated, self-service access authorization across distributed IT environments. You will bridge modern identity protocols with enterprise microservices, building scalable, automated pipelines that empower internal development teams to consume advanced authorization services seamlessly.\n\nAdvantages\nLong-Term Engagement: Stable multi-year contract opportunity running through March 2028.\n\nFlexible Work Arrangement: Primarily remote model with very occasional team touchpoints in Montreal or Quebec City.\n\nBalanced Workweek: Standard 35-hour work schedule promoting a healthy work-life balance.\n\nCutting-Edge Stack: Hands-on exposure to cloud identity, automated access control, Infrastructure as Code, and modern API security.\n\nImpactful Mission: Drive large-scale enterprise modernization in an organization placing digital trust and cybersecurity at the core of its business.\n\nResponsibilities\nPilot Design & Delivery: Prototype and deliver end-to-end authorization pilot solutions, configuring access management suites, establishing mock demo clients, and overseeing end-to-end token issuance, exchange, and validation lifecycles.\n\nFront-End & API Integration: Build functional proof-of-concept user interfaces in React to model token enrichment and user journeys; interface authorization flows with API gateways (such as Flex Gateway or MuleSoft) and .NET back-end services handling real-time policy evaluation.\n\nProtocol & Token Management: Implement and test robust token patterns, including On-Behalf-Of workflows, claims augmentation, multi-claim structures, and token swapping under OAuth 2.0, OpenID Connect, and JWT frameworks.\n\nDevOps & Automation: Structure enterprise repositories to deliver self-service integration frameworks; automate provisioning and CI/CD pipelines leveraging Terraform and Infrastructure-as-Code principles.\n\nCross-Functional Collaboration: Partner with Enterprise Architects and Product Owners to define technical roadmaps, untangle system dependencies, author technical design patterns, and provide comprehensive documentation to accelerate broad developer adoption.\n\nQualifications\nExtensive hands-on background in developing and integrating enterprise Identity and Access Management (IAM) architectures, access controls, and authentication mechanisms.\n\nDeep technical command of OAuth 2.0, OpenID Connect (OIDC), JWTs, token life cycles, claims transformation, scopes, and API client security.\n\nProven expertise deploying and configuring modern Identity-as-a-Service platforms (specifically Okta / Okta API Access Management).\n\nPractical experience building integration layers and debugging end-to-end flows across .NET APIs, API gateways, and downstream legacy systems.\n\nStrong experience in Infrastructure as Code (Terraform) and CI/CD pipeline automation within DevOps/DevSecOps environments.\n\nWorking proficiency with React to develop front-end integration demos and test clients.\n\nExcellent autonomy, problem-solving acumen, and ability to convert functional business security requirements into concrete technical proofs-of-concept.\n\nAssets: Familiarity with MuleSoft/Flex Gateway, containerized environments (Kubernetes), Microsoft Entra ID, policy engines (OPA, ABAC/RBAC), Salesforce integrations, or legacy gateway migrations (e.g., Layer7).\n\nLanguage proficiency: Fluent French and intermediate English.\n\nOur client operates in Canada. The company takes all reasonable steps to limit the number of positions in Quebec that require knowledge of a language other than French, and only requires it when necessary and its existing bilingual employees are unable to perform these duties. Based on an assessment conducted by our client, it has been determined that this position requires candidates to be fluent in English (both spoken and written). In particular, this position will require the employee to interact with centralized internal departments (e.g., Operations / HR / Finance / Legal / Contracts / Sales) that support the organization in Canada and that do not speak French.\n\nSummary\nRole Type: Full-time contractual mandate (35 hours/week)\n\nContract Duration: November 2026 to March 31, 2028 (Multi-year)\n\nLocation: Remote / Hybrid (occasional visits to offices in Montreal or Quebec City)\n\nCompensation: Competitive, aligned with market rates and candidate expertise\n\nRandstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.\n\nRandstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to  to ensure their ability to fully participate in the interview process.","description_format":"text","description_chars":6248,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management"],"lifecycle":[{"event":"open","at":"2026-11-03T01:42:15Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Positions approved through LMIA in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Talent Stream","cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.893,"p_room":0.9,"age_days":5,"expected_fill_days":15,"reasons":["seen:5","velocity","win:mid","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/randstad-canada-senior-iam-and-api-security-developer","json_url":"https://alion.io/job/randstad-canada-senior-iam-and-api-security-developer.json","meta":{"generated_at":"2026-11-08T08:19:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18059,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19351},"rest":"https://alion.io/mcp/rest/get_company?id=19351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frandstad-canada-senior-iam-and-api-security-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frandstad-canada-senior-iam-and-api-security-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frandstad-canada-senior-iam-and-api-security-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/randstad-canada-senior-iam-and-api-security-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frandstad-canada-senior-iam-and-api-security-developer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3655284}},{"tool":"search_jobs","arguments":{"company":"randstad.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3655284},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}