Calgary, AB, CA, Canada Hybrid Full-time $110,000 - $125,000

Finning is hiring an IAM Engineer – Authentication Management (AM)

About the Role

Take ownership of enterprise-wide authentication systems within a globally focused IAM team. You will play a central role in maintaining and modernizing identity infrastructure, with a focus on Entra ID, on-premises Active Directory, and secure access frameworks across complex, multi-domain environments.

What You'll Do

Drive the strategy and execution of identity and access management initiatives, ensuring secure and seamless authentication across cloud and on-prem systems. You will lead the evolution of legacy directory services toward modern identity platforms, with a strong emphasis on security, scalability, and reliability.

  • Configure and manage Entra ID for single sign-on, multi-factor authentication, and Conditional Access policies
  • Oversee enterprise application integrations, including app registration, consent governance, and lifecycle hygiene
  • Administer Graph API permissions and manage admin consent workflows
  • Support global Multi-Domain Active Directory environments and optimize authentication performance
  • Ensure Group Policy Object integrity and effective policy deployment
  • Lead migration initiatives from on-prem AD to Entra ID with minimal disruption
  • Implement Fido2 and phishing-resistant authentication methods to strengthen security posture
  • Monitor system health, generate operational reports, and respond to authentication incidents
  • Design and deploy federation using OIDC and SAML, along with SCIM-based user provisioning
  • Integrate Customer IAM workflows with ClearPass and support NPS configurations
  • Collaborate on large-scale IAM transformation projects across teams

Requirements

  • Minimum of 8 years of experience in identity and access management
  • Deep technical knowledge of Active Directory and Entra ID
  • Proven experience leading AD-to-Entra ID migration projects
  • Strong scripting and automation skills using PowerShell and Power Automate
  • Hands-on experience maintaining Group Policy health in enterprise environments
  • Solid understanding of modern authentication protocols and identity security principles

Preferred Qualifications

  • Experience supporting OKTA for identity management
  • Familiarity with ClearPass and Network Policy Server (NPS) configurations
  • Holding the Microsoft SC-300 certification or equivalent credential

Benefits

  • Hybrid work model supporting flexible work arrangements
  • Comprehensive health coverage including medical and dental
  • Short- and long-term disability protections
  • Pension plan for retirement security
  • Employee stock purchase program with company contributions
  • Access to career development and training resources
Required Skills
Entra IDOKTAClearPassNPSActive DirectoryOn-Prem ADSSOMFAConditional AccessGraph APIPowerShellPower AutomateAD-to-Entra transitionsGPO managementIAM Entra IDOKTAClearPassNPSActive DirectoryOn-Prem ADSSOMFAConditional AccessGraph APIPowerShellPower AutomateAD-to-Entra transitionsGPO managementIAM
Need to work legally in Thailand?

Work permits without the paperwork nightmare

Thai immigration rules are strict and easy to get wrong. SVBL handles the bureaucracy — correct visa type, proper documentation, timely submissions. You focus on your work.

Right visa type for your situation
Document preparation & submission
Deadline tracking & renewals
Direct liaison with immigration
Talk to an expert
10+ years experience
About company
Finning

Finning is the world's largest Caterpillar dealer, delivering unrivalled service for over 80 years. The company provides Cat equipment, machines, power systems, and technology solutions to customers across various industries.

As a trusted dealer, Finning offers sales, service, parts, and maintenance support for Caterpillar machinery and engines, serving sectors such as mining, construction, petroleum, forestry, and power systems.

Operating in multiple countries, Finning supports its customers with localized solutions and a strong commitment to safety, sustainability, and innovation.

All jobs at Finning Visit website
Job Details
Department Global IAM team
Category security
Posted 3 months ago