Identity Access Management (IAM) Consultant - Junior

Identity Access Management Consultant (Junior) – 2 Positions

Job Summary

We are seeking two Junior Identity Access Management (IAM) Consultants to support the Government of Ontario Public Key Infrastructure (GO-PKI) environment. The consultants will be responsible for the administration, support, monitoring, maintenance, modernization, disaster recovery, and integration of enterprise Identity and Access Management (IAM) solutions. This role requires experience supporting large-scale PKI and IAM environments, providing production support, and working with enterprise security technologies.

Responsibilities

GO-PKI Administration & Support

• Support GO-PKI Development, User Acceptance Testing (UAT), and Production environments.
• Upgrade Entrust Certificate Authority from version 8.2.40 to Entrust CA v10 in preparation for migration to Entrust Managed Cloud Services.
• Configure and maintain Hardware Security Modules (HSMs).
• Implement Disaster Recovery (DR) solutions for Entrust and Microsoft ADCS Certificate Authorities.
• Migrate Atos DirX to Oracle Unified Directory (OUD).
• Perform Proof of Concepts (POCs) for Entrust Managed Cloud Services.
• Monitor the health, performance, and availability of GO-PKI environments.
• Perform application startup, shutdown, maintenance, patching, certificate renewals, backups, and recovery.
• Troubleshoot, analyze, and resolve production incidents and system issues.
• Assess impacts of infrastructure and application changes.
• Work with vendors for product support and issue resolution.
• Develop and maintain operational documentation.

Production Support

• Provide 24x7 on-call support for production environments and scheduled support for non-production environments.
• Participate in Incident Management, Problem Management, Change Management, and Release Management activities.
• Provide Tier-2 and Tier-3 application support.
• Support networking infrastructure including:
• Load Balancers
• Firewalls
• Proxy Servers
• Gateways
• Routers

Identity & Access Management Integration

• Support Ontario Public Service (OPS) and Broader Public Sector (BPS) clients with GO-PKI integration.
• Analyze technical requirements and design integration solutions.
• Develop integration processes and implementation plans.
• Build, test, and deploy IAM integration solutions.
• Troubleshoot integration issues.
• Develop automation scripts, utilities, reports, and documentation.

Operational Improvements

• Develop and implement operational support tools.
• Evaluate and recommend new technologies and monitoring solutions.
• Develop automation scripts, reports, queries, and procedures.
• Document maintenance and operational procedures.

Disaster Recovery & System Management

• Assist with Disaster Recovery planning, implementation, and testing.
• Define and document system management processes.
• Configure monitoring, alerts, thresholds, and event management.
• Work with infrastructure hosting teams to implement operational procedures.

Knowledge Transfer

• Prepare technical documentation and operational runbooks.
• Develop knowledge transfer plans.
• Mentor OPS staff and transfer operational knowledge.
• Support transition of sustainment activities to internal government resources.

Required Skills & Experience

Identity & Access Management

• 10+ years of experience supporting Commercial Off-The-Shelf (COTS) Identity and Access Management systems.
• Minimum 4 years supporting IAM implementations with over 10,000 registered users.
• Extensive experience administering enterprise IAM production environments.

PKI & Security Technologies

Experience with:

• Entrust PKI Suite
• Entrust Security Manager
• Security Manager Proxy
• Admin Services
• Automated Enrolment Services (AES)
• Public Key Infrastructure (PKI)
• Public Key Management Infrastructure (PMI)
• SSL Certificates
• Hardware Security Modules (HSM)

Identity Management Technologies

Experience with:

• Oracle Identity Manager (OIM)
• Oracle Unified Directory (OUD)
• LDAP
• Atos Dir.X
• Apache Directory Studio
• LDAP CLI Tools

Middleware & Web Technologies

Experience supporting:

• Oracle WebLogic
• IIS
• Apache HTTP Server
• IBM Web Server
• NGINX

Databases

• Oracle Database 11g and later
• SQL

Operating Systems

Experience administering:

• Windows
• Linux
• Solaris
• AIX

IT Service Management

Strong knowledge of ITIL processes including:

• Incident Management
• Problem Management
• Change Management
• Release Management
• Service Level Management
• Capacity Management

Testing & Automation

Experience with one or more of:

• Team Foundation Server (TFS)
• Visual Studio Team Services (VSTS)
• Robot Framework
• GOSS
• SikuliX

Soft Skills

• Strong analytical and troubleshooting skills.
• Excellent verbal and written communication skills.
• Experience preparing technical documentation.
• Ability to work effectively with clients, infrastructure teams, and vendors.
• Knowledge transfer and mentoring experience.

Mandatory Qualifications

• 10+ years supporting enterprise Identity & Access Management (IAM) systems.
• 10+ years designing, deploying, implementing, and supporting enterprise IAM applications.
• Minimum 4 years of hands-on experience with Entrust PKI Suite.
• Experience supporting IAM environments with 10,000+ registered users.
• Strong experience with:
• Entrust PKI Suite
• Oracle Identity Manager (OIM)
• LDAP technologies
• Oracle WebLogic
• IIS
• Apache HTTP Server
• IBM Web Server
• NGINX
• Oracle Database
• SQL
• Windows, Linux, Solaris, and AIX

Experience with ITIL processes and enterprise production support.
Strong experience in troubleshooting, incident management, and release management.

Work Environment

• Onsite: 5 days per week.
• On-call Support: 24x7 production support and scheduled non-production support.
• Work in a large-scale Government of Ontario enterprise Identity & Access Management environment supporting mission-critical Public Key Infrastructure (PKI) services.

Top of Form

Bottom of Form