Cyber Solutions Architect, Identity and Access Management
Take a central role
The Bank of Canada has a vision to be a leading central bank—dynamic, engaged and trusted—committed to a better Canada. No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in an organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in our environment.
Building on the principles that have always guided us – excellence, integrity and respect – we strive to be forward-looking and innovative, to welcome people with diverse perspectives and talents, and to earn trust by living up to our commitments and by clearly explaining the intent of our policies and actions.
With our defined-benefit pension plan, benefits, and high flexibility for work life balance - find out more about why we are annually ranked as one of Canada's top employers: Working Here - Bank of Canada
Find out more about the next steps in our Recruitment process.
Note: Interviews for this position may begin prior to the poster closing date.
About the position
We are seeking an innovative and dedicated individual to join our forward-thinking Identity and Access Management (IAM) Portfolio within the Cyber Security Division.
Reporting to the Assistant Director, Credential & Identity Administration you will be part of a dynamic and highly skilled team of cyber specialists enabling Canada’s Central Bank to work securely. With the increase in sophistication and frequency of cyber-attacks, cyber security has been identified as a top priority at the Bank of Canada.
In joining the Bank of Canada team you will also have many opportunities for career development with the full support of your leader to enhance your skills, experiment, and drive your career in many ways (certifications, mentorship, etc.).
What you will do
The focus of this role is to lead and participate in the technical integration of privileged access management (PAM) and identity administration (IAM) solutions crafted to enable Bank to identify, protect, detect and respond to cyber threats.
More specifically, you will:
Review and improve existing solutions and capabilities-
Design and document new or improved IAM/PAM solutions to be deployed
-
Design and implement architectural patterns for the improvement of IAM cyber controls for the protection of privileged access/accounts.
-
Ensure that the integration of IAM solutions, data flow and infrastructure architectures meet evolving business and operational requirements as well as standards for reliability, scalability, and availability.
-
Participate in all phases of the product/DevOps life cycle to enhance the required cyber controls, adding technical know-how, creativity, and a seasoned perspective to delivering on IAM objectives in alignment with the Bank of Canada’s Cyber Security Strategy.
-
Play the role of the lead technical authority and responsible for effective integration, development, and ongoing resiliency of the Bank’s IAM platforms that manage and protect the people and machine identities.
-
Collaborate with Information Technology (IT) operations staff, as required, to analyze and resolve technical incidents, gather information about more complex problems and support ongoing solution enhancements.
-
Provide on-the-job training, coaching, guidance and support to more junior colleagues.
-
Research technology developments and industry trends; assess their applicability, functionality, and reliability for the Bank; and recommend improvements or new solutions that will enhance productivity and help clients achieve their business objectives.
What you need to succeed
You are a great teammate, willing to communicate and work with colleagues to deliver end-to-end solutions. You are also a self-starter, capable of grasping new information and providing innovative solutions in a team environment.
In addition, you have:
Experience in:
-
Defining architectural patterns as a Solutions Architect (or similar role) and implementing IAM privileged access/account management solutions to secure people, machine & secrets.
-
Defining and implementing advanced use cases such as Zero-Trust PAM implementation, Privileged Cloud, Application Identity Management (AIM), DevOps security and Behavioral Threat Analytics.
Knowledge of:
-
Identity Administration and Governance (IGA) solutions including managing user access, authentication, and authorization.
-
Privileged Access Management (PAM), Role Based Access and Attribute Based Access (RBAC/ABAC), and Cloud Based access controls (Conditional Access Policies, MFA, SAML, Oath).
Nice-to-have skills:
-
Designing and implementing IAM solutions in the Cloud (IaaS, PaaS, SaaS).
-
Relevant Cyber Security certifications (CISSP, GIAC, etc.)
-
Understanding of software design methodologies, libraries, frameworks, components, services and architectures and ability to reuse them in solutions.
-
Experience with hands-on development, scripting for automation, and/or Unix/Linux OS.
Your education and experience
Your combined education and work experience demonstrate that you have the proficiencies and skills for the role. We are ideally seeking candidates with a relevant degree/diploma and 5+ years of relevant experience.
What you need to know
-
Language requirement: English and French essential (bilingual) with a minimum starting level of intermediate (level 3) in second official language. Training may be provided to help reach the required level of functional (level 4) in second official language.
-
Priority will be given to Canadian citizens and permanent residents
-
Security level required: Be eligible to obtain Secret
-
Relocation assistance may be provided, if required
-
Please save a copy of the job poster. Once the closing date has passed, it will no longer be available.
-
The official title for this position is “Solutions Architect ”
Hybrid Work Model #LI-Hybrid
The Bank offers work arrangements that provide employees with flexibility, enable high-performing teams, and support an excellent workplace culture. Most employees can telework from home for a substantial part of each month as part of the Bank`s hybrid work model, and they are expected on site at the Bank location a minimum of eight days per month to help build connections between colleagues. You must live in Canada, and within reasonable commuting distance of the office.
What you can expect from us
This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider.
Salaries are based on qualifications and experience and typically range from $99,340 to $124,175 (job grade 18)-
Depending on performance, you may be eligible for performance pay. The first tier of performance pay is for successfully meeting expectation, at 7 to 10% of your base salary. The Bank offers additional performance pay for those who exceed expectations (15% of your base salary).. Exceptional performers who far exceed expectations may be eligible for higher performance pay.
-
Flexible and comprehensive benefits so you can choose the level of health, dental disability and life and/or accident insurance coverage that meets your needs
-
Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
-
Indexed, defined-benefit pension #LI-POST
We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.