Identity and Access Management Architect

@ Finning

Position Overview

The Identity and Access Management Architect role at Finning is responsible for designing and implementing IAM systems in coordination with the IAM Service Manager. Key areas include identity governance, account provisioning, single sign-on, multi-factor authentication, conditional access, and privileged account management.

The role collaborates with the Architecture team, business stakeholders, and engineering teams to define, evaluate, and update policies, standards, and solutions. It involves providing technical guidance, driving continuous improvement, creating and maintaining the technology roadmap, and interacting with industry experts to apply best practices.

The architect will develop complex IAM components, document solutions, and train operational teams while engaging in technology projects, design sessions, and operational initiatives.

Major Job Functions and Accountabilities

• Initiate/participate in technology projects and consult on business projects.
• Coordinate IAM roadmap, solution design, implementation, and operations planning.
• Collaborate with operations for contract management and service optimization.
• Lead design sessions and provide Tier 3.5 escalation support.
• Ensure documentation is up to date and aligned with global IAM objectives.

Qualifications

Applicants should have professional certifications or equivalent experience, with at least 5 years in an enterprise environment and 3 years in architectural solutions. Experience in business analysis, producing high quality documentation and solution artefacts, and knowledge across desktop and mobile operating systems is required. Hands-on experience with IAM, PAM, IGA frameworks and technologies like EntraID, Active Directory, Sailpoint IdentityIQ, and Delinea Secret Server is essential. A good understanding of cloud architectures (public, private, and hybrid) is expected.

What Finning Offers

• Hybrid work opportunity
• Career advancement and training programs
• Pension and employee stock purchase plans
• Extensive health benefits and disability coverage
• Competitive annual salary range between $110,000 and $125,000

Key skills/competency

• Identity Governance
• Account Provisioning
• Single Sign-On
• Multi-Factor Authentication
• Conditional Access
• Privileged Account Management
• IAM Technologies
• Cloud Architectures
• Documentation
• Technical Guidance