Manager - Identity Access Management

At KPMG, you’ll join a team of diverse and dedicated problem solvers, connected by a common cause: turning insight into opportunity for clients and communities around the world.

Are you a talented leader with a proven track record for motivating teams and delivering exceptional client service?

Our Cyber Security team in Toronto is looking for a professional like you with the skills and drive to make a real difference.

• Lead complex IAM implementations: Spearhead the design, implementation, and optimization of SailPoint, CyberArk, EntraID and related solutions for high-profile clients.
• Drive innovation: Leverage your expertise to introduce cutting-edge IAM practices, improving security postures and operational efficiency for our clients.
• Solve critical challenges: Address complex identity management issues in large-scale environments from cloud native, to on-prem and hybrid. Help us in developing custom solutions that meet unique client needs.
• Enhance client relationships: Serve as a trusted advisor, translating technical concepts into business value and guiding clients through their IAM transformation journey.
• Mentor and lead: Build and nurture high-performing teams, sharing your knowledge and fostering the growth of junior consultants.
• Shape industry standards: Contribute to the development of best practices and methodologies in IAM, positioning our firm as a thought leader in the field.
• Bridge technology gaps: Integrate Microsoft IAM solutions with other enterprise systems, creating cohesive and robust identity ecosystems.
• Ensure compliance: Help clients navigate complex regulatory landscapes, implementing IAM controls that meet industry-specific requirements.
• Drive digital transformation: Enable clients to securely embrace cloud and hybrid environments, facilitating their modernization efforts.
• Contribute to business growth: Identify new opportunities for IAM services and help expand our practice's capabilities and client base.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity;, or, demonstration of equivalent field experience
• Relevant industry certifications such as CISSP, CISM are highly desirable
• Demonstration Microsoft 365 and Security certifications is a must
• 8+ years of experience in IAM and cybersecurity
• 5+ years of hands-on experience with Microsoft technologies, including AD, Azure AD, and EntraID
• 5+ years of hands-on experience with solutions like SailPoint, CyberArk and other key identity related vendor platforms
• 3+ years in a senior consultant or team lead role
• Proven track record of successful IAM project deliveries in large enterprise environments
• Deep understanding of IAM best practices, trends, and emerging technologies
• Familiarity with regulatory requirements in finance, energy, and government sectors (e.g., GDPR, HIPAA, PCI-DSS)
• Knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001)
• Expert knowledge of Microsoft Identity and Access Management solutions, including SailPoint, CyberArk, EntraID, Azure AD, and on-premises Active Directory.
• Knowledge of and experience with adjacent solutions in the Microsoft Security suite, as well as demonstrated knowledge of the Microsoft E3 and E5 licensing bundles
• Strong experience with Privileged Access Management (PAM) implementation and best practices using CyberArk
• Proficiency in cloud identity services, federation technologies, and hybrid identity scenarios
• Hands-on experience with identity governance and compliance frameworks
• Understanding of authentication protocols such as OAuth, SAML, and others
• Excellent project management abilities with experience in both Waterfall and Agile methodologies
• Strong analytical and problem-solving skills
• Outstanding communication skills, both written and verbal
• Ability to translate complex technical concepts for non-technical audiences
• Experience in client-facing roles and stakeholder management
• Leadership skills with a track record of mentoring and developing team members
• Experience with complementary IAM technologies (e.g., Okta, Ping Identity, etc)
• Familiarity with DevOps practices and tools
• Knowledge of Identity-as-a-Service (IDaaS) platforms
• Understanding of Zero Trust architecture principles

Providing you with the support you need to be at your best

Integrity, we do what is right | Excellence, we never stop learning and improving | Courage, we think and act boldly | Together, we respect each other and draw strength from our differences | For Better, we do what matters

KPMG in Canada is a proud equal opportunities employer and we are committed to creating a respectful, inclusive and barrier-free workplace that allows all of our people to reach their full potential. A diverse workforce is key to our success and we believe in bringing your whole self to work. We welcome all qualified candidates to apply and hope you will choose KPMG in Canada as your employer of choice. For more information about Inclusion, Diversity & Equity in Recruitment, please click here.

Adjustments and accommodations throughout the recruitment process

At KPMG, we strive for an inclusive recruitment process that allows all candidates to Come As You Are and Thrive with Us. We aim to provide a positive experience and are ready to offer adjustments or accommodations to help you perform at your best. Adjustments (an informal request), i.e. extra preparation time or the option for micro breaks during interviews, and accommodations (a formal request), i.e. accessible communication supports or technology aids are tailored to individual needs and role requirements.

To begin a confidential conversation about adjustments or accommodations at any point throughout the recruitment process, we encourage you to contact KPMG’s Employee Relations Service team for support by emailing cdnersteam@kpmg.ca or by calling 1-888-466-4778, Option 3.

For information about accessible employment at KPMG, please visit our accessibility page.