IAM Engineer – Authentication Management (AM)

IAM Engineer – Authentication Management (AM)
Finning International Inc.
·
3.8
Edmonton, AB
•
Hybrid work
Job details
Here’s how the job details align with your profile.
Pay
$110,000–$125,000 a year
Job type
Full-time
Benefits
Pulled from the full job description
Dental care
Disability insurance
Full job description
Company:
Finning International Inc.
Number of Openings:
1
Worker Type:
Permanent
Position Overview:
As a senior member of Finning’s Global IAM team, you will co-own Authentication Management end-to-end, with a focus on Entra ID, OKTA, ClearPass/NPS, and maintaining healthy On-Prem AD. You will be responsible for overall GPO health and management, and driving operational excellence in a high-paced, results-driven environment.

What we can offer you:
Great people and place to work with a hybrid work opportunity
Career advancement and training opportunities
Pension and employee stock purchase plans with company contributions
Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits
For this position, the expected salary range is between $110,000 and $125,000 annually. This range reflects our commitment to providing competitive compensation that aligns with industry standards and your qualifications.
Job Description:
Key Responsibilities:

Manage Entra ID configurations for SSO, MFA, and Conditional Access baselines.

Oversee app registrations, Enterprise application approvals, and hygiene.

Manage admin consent governance for Graph/API scopes.

Support Multi-Domain Active Directory and ensure optimized authentication globally.

Maintain overall GPO health and management.

Lead transitions from On-Prem AD to Entra ID and from.

Enhance authentication capabilities using Fido2 and Phish resistant authentication

Monitor authentication service health and publish reports.

Projects:

Implement federation patterns (OIDC/SAML) and SCIM integrations.

Advance Customer IAM journeys and posture integration with ClearPass.

Drive transition projects and collaborate with the broader IAM team.

Skills & Qualifications:

8+ years in IAM, with strong expertise in Active Directory, Entra ID,

Managing and supporting OKTA, ClearPass and NPS an asset.

Direct experience with AD-to-Entra transitions and advanced automation/scripting (PowerShell, Power Automate).

Proven ownership of GPO health

Deep understanding and experience using authentication technologies.

Microsoft SC-300 or equivalent certification preferred.

Environment:
High-paced, results-driven, and demanding role requiring strong ownership and leadership.

At Finning, we prioritize creating a diverse and inclusive environment. We are proud to be an equal opportunity employer, and we actively encourage all individuals to express themselves and achieve their full potential. As a company, we continuously strive to enhance our outreach to individuals of all backgrounds and identities. We do not discriminate against applicants based on gender identity, race, national and ethnic origin, religion, age, ****** orientation, marital and family status, and/or mental or physical disabilities. Furthermore, Finning is committed to collaborating with and providing reasonable accommodations /adjustments to individuals with disabilities. If you require an adjustment/accommodation at any point during the recruitment process, please inform your recruiter.