IAM Engineer – Authentication Management (AM)

Company:Finning International Inc.

Number of Openings:1

Worker Type:Permanent

Position Overview:As a senior member of Finning’s Global IAM team, you will co-own Authentication Management end-to-end, with a focus on Entra ID, OKTA, ClearPass/NPS, and maintaining healthy On-Prem AD. You will be responsible for overall GPO health and management, and driving operational excellence in a high-paced, results-driven environment.
What we can offer you:
· Great people and place to work with a hybrid work opportunity
· Career advancement and training opportunities
· Pension and employee stock purchase plans with company contributions
· Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits
· For this position, the expected salary range is between $110,000 and $125,000 annually. This range reflects our commitment to providing competitive compensation that aligns with industry standards and your qualifications.

Job Description:

Key Responsibilities:

• Manage Entra ID configurations for SSO, MFA, and Conditional Access baselines.
• Oversee app registrations, Enterprise application approvals, and hygiene.
• Manage admin consent governance for Graph/API scopes.
• Support Multi-Domain Active Directory and ensure optimized authentication globally.
• Maintain overall GPO health and management.
• Lead transitions from On-Prem AD to Entra ID and from.
• Enhance authentication capabilities using Fido2 and Phish resistant authentication
• Monitor authentication service health and publish reports.

Projects:

• Implement federation patterns (OIDC/SAML) and SCIM integrations.
• Advance Customer IAM journeys and posture integration with ClearPass.
• Drive transition projects and collaborate with the broader IAM team.

Skills & Qualifications:

• 8+ years in IAM, with strong expertise in Active Directory, Entra ID,
• Managing and supporting OKTA, ClearPass and NPS an asset.
• Direct experience with AD-to-Entra transitions and advanced automation/scripting (PowerShell, Power Automate).
• Proven ownership of GPO health
• Deep understanding and experience using authentication technologies.
• Microsoft SC-300 or equivalent certification preferred.

Environment:
High-paced, results-driven, and demanding role requiring strong ownership and leadership.

At Finning, we prioritize creating a diverse and inclusive environment. We are proud to be an equal opportunity employer, and we actively encourage all individuals to express themselves and achieve their full potential. As a company, we continuously strive to enhance our outreach to individuals of all backgrounds and identities. We do not discriminate against applicants based on gender identity, race, national and ethnic origin, religion, age, sexual orientation, marital and family status, and/or mental or physical disabilities. Furthermore, Finning is committed to collaborating with and providing reasonable accommodations /adjustments to individuals with disabilities. If you require an adjustment/accommodation at any point during the recruitment process, please inform your recruiter.