Principal Identity & Access Management (IAM) Engineer
Toronto, Ontario, Canada · Hybrid
$130k–$140k/yr
Senior+
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. W…
Skills: Identity & Access Management, IAM Strategy, Authentication, Authorization, Federation
Aviso Insurance Inc. is seeking a Coordinator to join our fast-growing organization. The successful candidate will work out of our Aviso Insurance office located in Rosetown, SK. This is a permanent full-time position. T…
Administrateur ou administratrice de régimes enregistrés, temporaire
Toronto, Ontario, Canada · Hybrid
$46k–$55k/yr
Mid level
Aviso : À Aviso, nous nous consacrons à l’amélioration du bien-être financier des Canadiennes et des Canadiens. À titre d’organisation de gestion de patrimoine de premier plan, nous nous engageons à faire preuve de leade…
Administrateur ou administratrice de régimes enregistrés, temporaire
Montreal, Quebec, Canada · Hybrid
$46k–$55k/yr
Mid level
Aviso : À Aviso, nous nous consacrons à l’amélioration du bien-être financier des Canadiennes et des Canadiens. À titre d’organisation de gestion de patrimoine de premier plan, nous nous engageons à faire preuve de leade…
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Skills: Registered plans administration, Operations, Financial industry knowledge, Communication skills, Time management
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Skills: Registered plans administration, Operations, Financial industry knowledge, Communication skills, Time management
Employment Opportunity Position Name: Wealth Advisor Location: West Kootenay Region – Nelson/Rossland BC Annual Salary Range: $74,000.00 - $80,000.00 *Transition to variable pay model after two years of employment Catego…
Employment Opportunity Position Name: Financial Planning Administration Assistant Location: Cranbrook/Elk Valley Annual Salary Range: $47,000.00 - $65,000.00 Category: Permanent, Full time About Growth Investment Managem…
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Skills: Back office administration, Problem solving, Organizational skills, Multi-tasking, English fluency
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Skills: Back Office Administration, Problem Solving, Organizational Skills, Multi-tasking, English Fluency
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. W…
Skills: Responsible Investing, Stewardship, Relationship Building, Financial Analysis, Public Speaking
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. W…
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. W…
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. W…
Aviso: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. W…
Aviso Wealth: At Aviso Wealth, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, an…
Aviso Wealth: At Aviso Wealth, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, an…
Aviso Wealth: At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and commu…
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
$130k–$140k/yr
Full-time
Competitive compensation package, Health insurance, Dental insurance, Insurance benefits, Generous vacation time, Fitness benefit
Posted 11d ago
~40 hrs/week
Responsibilities
The Principal IAM Engineer will define and implement enterprise-wide identity and access management policies, standards, and target-state architecture. They are responsible for configuring IAM tooling, automating workflows, and ensuring robust governance for both internal users and external partners.
Requirements
Candidates must have over 8 years of experience in IAM with deep expertise in authentication, authorization, and identity governance platforms. Proficiency in scripting, automation, and managing identity protocols within a regulated financial services environment is essential.
Full job description
Aviso:
At Aviso, we are dedicated to improving the financial well-being of Canadians. As a leading wealth management organization, we are committed to leadership, innovation, partnership, responsibility, and community. Working with talented and energetic professionals who exemplify our values every day, you will quickly notice that our people and dynamic ‘oneaviso’ culture sets us apart. If you are looking for interesting and challenging work, at a company committed to its people, find out more about what Aviso has to offer at www.aviso.ca.
The Opportunity:
We’re looking to fill an opening for a Principal Identity & Access Management (IAM) Engineer to join our Technology Ops & Support Partners team.
Reporting to the Director, Technology Support Services, the Principal IAM Engineer is responsible for IAM end-to-end: defining the policies, standards, target-state architecture and building.
This is not a slideware role. You’ll design the model and then implement it — configuring tooling, writing automation, integrating applications, and standing up the governance that lets us prove who has access to what, for both internal users and external partners.
The Principal IAM Engineer will also monitor adherence to change governance requirements, support the end-to-end lifecycle of standard, normal, and emergency changes, and escalate exceptions, risks, and control gaps as required.
As oneaviso:
We Care – You do the right thing for clients, partners and colleagues. You build trusted relationships, champion service excellence, and contribute to a culture where people feel valued and supported
We Dare –You challenge the status quo with bold ideas and fresh perspectives. You embrace change, seek opportunities to innovate and are comfortable exploring new ways of working
We Share – You collaborate openly and build meaningful relationships. You seek out diverse perspectives, share your knowledge and work together to help colleagues, clients and partners succeed
We Deliver – You take ownership of your work, honour your commitments and focus on delivering meaningful results. You hold yourself accountable and continuously look for ways to improve
What your day looks like:
Own and continuously evolve the enterprise Identity & Access Management (IAM) strategy, policies, and standards across authentication, authorization, lifecycle, and access governance, mapped to NIST CSF 2.0, CIRO, PIPEDA, and SOC/ITGC obligations, and translated into business-level risk for leadership
Oversee the end-to-end identity architecture across workforce SSO/MFA, IGA, PAM, directory/federation, and B2B partner identity; guide the ongoing optimization of the toolset (e.g., Entra ID, Okta/Ping, SailPoint/Saviynt, CyberArk) and advance federation and provisioning patterns (SAML, OIDC, OAuth 2.0, SCIM, FIDO2) within a Zero Trust model
Drive continuous improvement of the joiner-mover-leaver lifecycle for internal users and the onboarding/offboarding experience for external partner firms and advisors, expanding delegated administration, B2B federation, and least-privilege scoping through automated, auditable workflows
Grow and improve the access review and recertification program across internal and external populations, refine the entitlement catalogue and SoD controls, and strengthen reporting so we can consistently demonstrate who has access to what, why, and when it was last reviewed with audit-ready evidence
Implement what you design: configure platforms, build connectors and app onboarding, and automate with PowerShell/Microsoft Graph, Python, and Terraform/Bicep; partner with Security/CISO, Technology Ops, application owners, and external partner firms to support audits and regulatory reviews
Your experience and skills:
8+ years of experience in IAM, with deep, demonstrated coverage of authentication, authorization, federation, identity governance, and directory services
Hands-on experience across the stack: at least one IGA platform (e.g., SailPoint, Saviynt, or Entra ID Governance), a workforce identity platform (Entra ID and/or Okta), and a PAM solution
Proven design of RBAC/ABAC models, entitlement catalogues, SoD controls, and access certification / recertification programs
Strong capability with federation and provisioning protocols: SAML, OIDC, OAuth 2.0, SCIM
Proven scripting/automation ability — you can build, not just specify (PowerShell + Graph API, Python; IaC a plus)
Experience with governing external / B2B partner identity — federation with partner IdPs, delegated administration, and lifecycle/reviews for external users
Track record in a regulated environment (financial services strongly preferred) with audit and compliance fluency
Able to translate technical access risk into clear business and executive-level risk language
Fluent communication skills in English are required and bilingual skills in French are an asset
Why Aviso?
At Aviso, you will find a dynamic and inclusive culture that rewards innovation and celebrates success. Here are a few things that set us apart:
Competitive compensation package that rewards and recognizes individual contributions
Excellent health, dental and insurance benefits to meet the diverse needs of our employees
Generous vacation time, fitness benefit, parental leave top-up options
Matching contributions to our retirement program
Commitment to the continuous improvement of our staff through learning & development and an education assistance program
Regular social events to foster teamwork
Your Information
By submitting your application, you consent to the collection, use, and disclosure of your provided personal information for the purposes of assessing your qualifications and suitability for employment with Aviso. Your information will be handled in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial legislation. Your data may be shared with authorized personnel involved in the recruitment process and retained only as long as necessary to fulfill these purposes or as required by law.
Further information is available on the Privacy link on our Career Page – Privacy Policies
Equal Employment Opportunity
Aviso welcomes and encourages applications from all qualified individuals including persons with disabilities. If you require an accommodation, we will work with you to meet your needs in all stages of the hiring process.
We thank all applicants for their interest, however, only those selected for further consideration will be contacted.
No recruiters or agencies, please.
Company Overview:
Aviso is a leading wealth management and investment services provider for the Canadian financial industry, with approximately $145 billion in total assets under administration and management, and over 1,000 employees. We’re building a comprehensive, technology-enabled, client-centric wealth services ecosystem. Our clients include our partners, advisors, and investors. We’re a trusted partner for nearly all credit unions across Canada, in addition to a wide range of portfolio managers, investment dealers, insurance and trust companies, and introducing brokers. Our partners depend on Aviso for specific solutions that give them a competitive edge in a rapidly evolving, highly competitive industry. Our investment dealer and mutual fund dealer and our insurance services support thousands of investment advisors. Our asset manager, NEI Investments, specializes in investing responsibly. Our online brokerage, Qtrade Direct Investing®, empowers self-directed investors, and our fully automated investing service, Qtrade Guided Portfolios®, serves investors who prefer a hands-off approach. Aviso Correspondent Partners provides custodial and carrying broker services to a wide range of firms. We have offices in Toronto, Vancouver, and Montreal. Aviso is backed by the collective strength of our owners: the credit union Centrals, Co-operators/CUMIS, and Desjardins. We’re proud to power businesses that empower investors.
A career with Aviso means being part of a group of talented, energetic professionals who live their values every day, and belonging to an organization dedicated to your success and career development. If you’re looking for interesting and challenging work, at a company committed to its people, apply to join our team.
Salary
This position is posted with an expected salary range of $130,000 - $140,000 CAD annually. Individual compensation packages are based on various factors unique to each candidate and the requirements of the position.
Aviso Wealth empowers credit unions across Canada to offer holistic wealth planning and advice through experienced advisors, to help Canadians grow and protect their wealth at every stage of their financial journey. We’re focused on continually enhancing advisor and investor experiences.
As a trusted partner, Aviso Wealth provides credit unions with access to a comprehensive range of high-quality, innovative investing and wealth management solutions, plus dealer services and back-office administration. Comprehensive estate planning services are offered through Aviso Wealth Inc. subsidiaries to complement the overall financial planning process.
We’re backed by the strength of Aviso – a leading Canadian wealth and investment services provider with three decades of experience supporting the delivery of financial advice for Canadians.
Mutual funds and other securities are offered through Aviso Wealth, a division of Aviso Financial Inc.
Aviso Wealth Inc. ('Aviso') is a wholly owned subsidiary of Aviso Wealth LP, which in turn is owned 50% by Desjardins Financial Holding Inc. and 50% by a limited partnership owned by the five Provincial Credit Union Centrals and The CUMIS Group Limited. The following entities are subsidiaries of Aviso: Aviso Financial Inc. (including divisions Aviso Wealth, Qtrade Direct Investing, Qtrade Guided Portfolios, Aviso Correspondent Partners), and Northwest & Ethical Investments L.P.
Offices: 700-1111 West Georgia Street, Vancouver, BC V6E 4T6, CA
Aviso Wealth empowers credit unions across Canada to offer holistic wealth planning and advice through experienced advisors, to help Canadians grow and protect their wealth at every stage of their financial journey. We’re focused on continually enhancing advisor and investor experiences.
As a trusted partner, Aviso Wealth provides credit unions with access to a comprehensive range of high-quality, innovative investing and wealth management solutions, plus dealer services and back-office administration. Comprehensive estate planning services are offered through Aviso Wealth Inc. subsidiaries to complement the overall financial planning process.
We’re backed by the strength of Aviso – a leading Canadian wealth and investment services provider with three decades of experience supporting the delivery of financial advice for Canadians.
Mutual funds and other securities are offered through Aviso Wealth, a division of Aviso Financial Inc.
Aviso Wealth Inc. ('Aviso') is a wholly owned subsidiary of Aviso Wealth LP, which in turn is owned 50% by Desjardins Financial Holding Inc. and 50% by a limited partnership owned by the five Provincial Credit Union Centrals and The CUMIS Group Limited. The following entities are subsidiaries of Aviso: Aviso Financial Inc. (including divisions Aviso Wealth, Qtrade Direct Investing, Qtrade Guided Portfolios, Aviso Correspondent Partners), and Northwest & Ethical Investments L.P.
Offices: 700-1111 West Georgia Street, Vancouver, BC V6E 4T6, CA