Senior IAM Architect

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.

At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong. 

The Impact You'll Make:

We are looking for an enthusiastic subject matter expert in Identity and Access Management to join our diverse team of professionals who collaborate together to drive best in class standards across our organization.

The Senior IAM Architect’s role is a technical position responsible for architecting, engineering, implementing and maintaining IAM’s Identity Management products. The Senior IAM architect will work with other Architects and Application Owners to drive integration and customization of the IAM solution and be able to build Loblaw’s IdentityIQ implementation, the IAM architect will require in-depth knowledge of how the IdentityIQ and its wide variety of features are configured and customized.

What You'll Do:

• Subject-matter expertise across all IAM topics as it relates to both cloud and on-premises enterprise technology, and the relationship between the architectures.
• Drive the adoption of Authentication and Authorization reference architectures for existing, new and emerging IAM technologies.
• Drive the adoption of creative solutions to address complex IAM problems in retail environment
• Participate in Identity and Access Management enterprise governance processes and drive IAM standards adoption.
• Develop effective architecture solutions that not only satisfy immediate project requirements but also deliver a coherent, reusable, reliable and phased architecture to help the business grow and change while aligning to strategic vision.
• Create, maintain and align the LCL’s Information Security policies and standards with industry best practices and business needs in the adoption of cloud services and technologies.
• Manage the successful technical delivery of Information Security projects and services for our customers by working directly with key business stakeholders, executives and project teams. Security architects are often the technical lead on initiatives and as such must drive the vision and alignment of the solution delivery.
• Review and management of technical security roadmaps related to cloud security and IAM within a cloud security context.
• Deliver technical security configuration architecture expertise in implementing cross-organizational information sharing.
• Develop solutions and recommendations for issues caused by process challenges, emerging threats and technology changes.

What you bring:

• 7+ years of experience in architecting IAM solutions within Microsoft Azure, GCP, SailPoint and, preferably, other cloud providers and Broadcom IDM
• Experience designing and building J2EE application environment with database driven application.
• Intimately familiar with IAM related protocols such as SAML, SPML, XACML, SCIM, OpenID and OAuth.
• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.
• Federation concepts and technologies particularly with solutions from Azure AD and Okta.
• In-depth experience with Microsoft Azure, particularly Azure AD / GCP IAM and architecture designs connecting Azure to enterprise infrastructure.
• Strong experience with Directories, SSO, Federation, Delegated administration, API gateways, SOA services.
• Strong understanding of cloud computing architecture, technical design and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) delivery models.
• Excellent customer service and communication (oral / written) skills required.
• Strong critical thinking and analytical skills and ability to think “out of the box” required.
• Must be able to work independently or with a team, under minimum supervision.
• Consults to key customers and senior management on project design and development scope.
• Some knowledge of scripting languages (vbscript, powershell, perl, javascript, Graph API, Python and LDAP query etc.).
• Assists customer organizations with planning and implementing complex architecture solutions.
• Some software development experience is desirable.

Must have:

The individual in this role must be able to understand and interpret identity and access management strategies and direction.  Further, the person must be able to bring together key tenets of Information Security to the IAM cloud strategies and develop technical security solutions that properly align.  The Architect will contribute to the overall effort of the IAM direction of LCL

• Expert level experience in;
  • Sailpoint IAM solution on data and provisioning/workflow integration.
  • Cloud Authentication and Access management Services.
• Cloud solution development with Azure, AWS, Google, or other relevant cloud solution architectures.
• Good understanding of Multi-Factor authentication and Privileged Access Management
• Working knowledge and understanding of networking technologies such as LAN, WAN, TCP/IP, load balancers, firewalls etc.

Our commitment to Sustainability and Social Impact is an essential part of the way we do business, and we focus our attention on areas where we can have the greatest impact. Our approach to sustainability and social impact is based on three pillars – Environment, Sourcing and Community – and we are constantly looking for ways to demonstrate leadership in these important areas. Our CORE Values – Care, Ownership, Respect and Excellence – guide all our decision-making and come to life through our Blue Culture. We offer our colleagues progressive careers, comprehensive training, flexibility, and other competitive benefits – these are some of the many reasons why we are one of Canada’s Top Employers, Canada’s Best Diversity Employers, Canada’s Greenest Employers & Canada’s Top Employers for Young People.

If you are unsure whether your experience matches every requirement above, we encourage you to apply anyway. We are looking for varied perspectives which include diverse experiences that we can add to our team.

We have a long-standing focus on diversity, equity and inclusion because we know it will make our company a better place to work and shop. We are committed to creating accessible environments for our colleagues, candidates and customers. Requests for accommodation due to a disability (which may be visible or invisible, temporary or permanent) can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable opportunities.  
 
Please Note:
Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.

#EN