An Initial AI Screening will be conducted for this role.

Contract Duration: ASAP till Oct 31st

Typical Day in Role: • Provide strategic leadership and direction for CIAM engineering and platform delivery, ensuring alignment with enterprise security strategy, reliability standards, and digital identity modernization initiatives. • Own the CIAM capability roadmap, overseeing the design, evolution, and continuous improvement of CIAM platforms and services to meet current and future business and security needs. • Establish and govern CIAM architecture and frameworks, ensuring alignment with organizational security standards, regulatory obligations, and industry best practices. • Set technical standards and best practices for identity federation, SSO, MFA, OAuth2/OIDC flows, adaptive authentication, and API‑based integrations across digital channels. • Ensure CIAM solutions meet regulatory, compliance, and security requirements across geographies, customer segments, and channels, working closely with risk and assurance partners. • Oversee onboarding and expansion of digital channels onto CIAM platforms, ensuring consistent, secure, and scalable implementations through well‑defined patterns and controls. • Lead risk assessments and technical security reviews for CIAM integrations, approving design decisions and ensuring that appropriate mitigation strategies are identified and implemented. • Drive continuous improvement of engineering and delivery processes, including deployment models, onboarding workflows, implementation guidelines, and operational readiness. • Collaborate with senior stakeholders across engineering, product, security, architecture, and operations to enable smooth adoption of CIAM services and resolve complex cross‑team dependencies. • Provide thought leadership, coaching, and technical oversight to CIAM engineers and partner teams, enabling high‑quality solutions without the need for direct hands‑on execution. • Ensure high‑quality technical documentation and guidance is available and maintained, including architectures, standards, runbooks, and troubleshooting procedures. • Build and maintain strong working relationships with technology partners, delivery teams, and business stakeholders to support successful program and platform outcomes. • Embed the Bank’s risk appetite and risk culture into CIAM decisions, ensuring proactive risk identification, escalation, and informed decision‑making. • Champion a customer‑centric, inclusive, and collaborative engineering culture, fostering accountability, continuous learning, and strong engagement across the CIAM organization.

Must Have Skills:

1. 10+ years of progressive experience leading and overseeing the design, implementation, and modernization of enterprise‑scale platforms built on Java/J2EE, Spring Framework, Node.js, RESTful APIs, event‑driven architectures (Kafka), and cloud‑based data services.
2. 5+ years of deep experience providing technical leadership for CIAM platforms, including ForgeRock (AM, IDM, DS) and Ping Identity (PingFederate, PingAccess, PingDirectory), with exposure to Okta and other SaaS IAM providers considered an asset.
3. Expert‑level understanding of identity and access management protocols and standards, including OAuth 2.0, OpenID Connect, SAML, LDAP, and their application across enterprise and customer identity use cases.
4. Demonstrated ability to define IAM and CIAM architectures for hybrid and cloud environments (AWS, Azure, GCP), ensuring scalability, resilience, and alignment with enterprise security strategy.
5. Strong foundation in cybersecurity principles, risk management, and regulatory compliance, with the ability to align IAM decisions to the Bank’s risk appetite and control frameworks.

Nice-To-Have Skills:

1. Strategic oversight of identity federation, SSO, MFA, and adaptive authentication solutions, ensuring secure, consistent implementations across channels and regions.
2. Leadership experience in DevOps and Infrastructure‑as‑Code practices (e.g., Terraform), enabling standardized, repeatable, and secure IAM deployments.
3. Proven leadership in CI/CD and deployment automation, governing engineering standards and release practices using Jenkins, cloud‑native deployment frameworks (GCP/Azure/AWS), and DevOps tooling.

Soft Skills Required:

1. Exceptional communication, prioritization, and time‑management skills, with a track record of operating effectively in fast‑paced, regulated environments.
2. Experience enabling capability uplift through training and knowledge transfer, including delivery of technical training sessions using virtual collaboration platforms.
3. Oversight of high‑quality technical documentation, including enterprise architecture diagrams, standards, configuration guidelines, operational procedures, and runbooks.
4. Proven ability to prepare executive‑level communications, including technical briefings, decision papers, and risk summaries tailored for senior leadership, governance forums, and regulators.
5. Extensive experience operating within a matrix organization, influencing across engineering, product, security, risk, operations, and business stakeholders to drive outcomes without direct authority.
6. Strong leadership competencies in planning, analytics, presentation, project and change management, coupled with effective relationship‑building at all organizational levels.
7. Proven capability to guide teams through complex IAM integration challenges, providing escalation support, architectural direction, and resolution of high‑impact issues.

Education: Bachelor's degree in Cybersecurity, Computer science, Engineering, or any other related.

FP Inc. is committed to creating an inclusive environment where all team members and clients feel like they belong. In accordance with the requirements set out in the Employment Standards Act, FP Inc. hereby declares that AI is utilized in the screening process for this position. The hourly compensation range for this role is $90/hr -$100/hr. We seek applicants with a wide range of abilities, and we provide an accessible candidate experience. We advocate for you and welcome anyone regardless of race, colour, religion, national origin, sex, physical or mental disability, or age