IAM Architect - Scotiabank, Toronto

Position Summary

Join a purpose-driven, winning team committed to results within an inclusive and high-performing culture at Scotiabank. We are actively seeking an IAM Architect (Workforce) to become a key member of Enterprise Security’s Identity Access Management Team. This role is central to Scotiabank's commitment to robust security and innovative technology.

The ideal candidate will possess strong leadership skills and in-depth knowledge of the workforce IAM security domain, with a particular focus on authentication technologies, identity lifecycle management, privileged access, industry standards, and emerging protocols. You will lead the design and modernization of Scotiabank’s various IAM platforms as part of a significant large-scale transformation program. The IAM Architect will collaborate with business channels and product teams to understand challenges, provide effective solutions, and recommend architecture and design to bring modern capabilities to our diverse identity platforms.

What You'll Do

• Be responsible for the architecture and design of new features and capabilities that Scotiabank is looking to introduce into the IAM platform, including technologies like Microsoft Entra ID, ForgeRock, Ping, SailPoint, CyberArk, and Radiant Logic.
• Design the technical roadmap to support user identity and application migration from on-premises Identity Providers to the Microsoft Entra ID platform.
• Provide subject matter expertise surrounding the various security controls, such as MFA, Conditional Access Policies, and Intune Device Management, within the Microsoft platform.
• Oversee the design and modernization of workforce identity lifecycle platforms, ensuring key principles of data ownership, provisioning, observability, and auditing align with risk, compliance, and external regulatory requirements for both on-prem and SaaS cloud-based identities.
• Configure and validate architectural designs within the Entra Platform to verify solutions and new capabilities proposed for adoption.
• Review the business requirements provided by the IAM Product team and provide the overall architectural design to the IAM Engineering team to build into the IAM service.
• Provide required design artifacts to key stakeholders which clearly outline the solution, components involved, key decisions, and time and cost estimates.
• Closely collaborate with IAM Engineering partners in all aspects of the design and ensure alignment and synergy regarding proposed solutions.
• Evaluate new authentication capabilities introduced into the ever-changing IAM landscape and account for what is applicable into proposed designs (short-term and long-term).
• Partner with various cross-functional architect teams (IAM, security, business channel, fraud, workspace) to solidify design approaches which align with best practices and the strategic direction of the platform.
• Collaborate with stakeholders across the Bank — technology, security architecture, security advisory, fraud, compliance, and business channel teams — to provide enterprise-grade solutions which meet business and security requirements.
• Represent the IAM Architecture team on various governance boards by providing both expertise and the required artifacts necessary to ensure stakeholder approval.
• Design based on strong IAM expertise that aligns with industry standards (FIDO, OIDC, OAUTH, SCIM, SPIFFE), best practices (MFA, NIST 800-63), and a forward-looking mentality (Passkeys, VCs, DIDs).

Skills and Experience

To excel in this IAM Architect role, you will bring a robust background in identity and access management, coupled with significant experience in architectural design and implementation across various security platforms.

• 10+ years of experience in the IAM space, with at least 3+ years specifically in an Architect role.
• 5+ years of experience working with IAM platforms or technologies such as Microsoft Entra, ForgeRock, SailPoint, CyberArk, Radiant Logic, or Ping Identity.
• 3+ years of hands-on experience with the Microsoft Entra ID platform.
• Experience developing and documenting IAM directives, standards, and policies.
• Experience with designing and implementing authentication and credential management flows based on channel requirements.
• Experience in scoping, sizing, and prioritizing solutions for a project.
• Strong understanding of workforce identity lifecycle patterns (SOD) and anti-patterns (toxic combinations).
• Previous exposure to Regulatory, Compliance, Risk, and Audit functions.

The following skills and experiences are considered valuable assets for this position:

• Knowledge of project finance or previous experience working within the Banking Sector.
• Experience in the preparation of presentation decks and presenting to senior leadership.
• Experience with Azure domain joined or hybrid workstation configurations.
• Experience with Java-based programming languages (Java, JavaScript, NodeJS).

The Team

You’ll join a dynamic team focused on building cloud platforms as products, enabling delivery teams across the enterprise rather than acting as a centralized gatekeeper or operating within a narrow delivery focus. This role offers unparalleled exposure to a wide range of technologies, complex problem domains, and diverse stakeholders, fostering continuous learning and professional growth.

Scotiabank is deeply committed to Diversity, Equity, Inclusion & Allyship, striving to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and embraced through bias-free practices and inclusive values. We embrace diversity and provide opportunities for all employees to learn, grow, and participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability, and veterans. We also value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone, actively working to remove and prevent barriers.

As part of Scotiabank careers, you can expect:

• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• A competitive Rewards program including bonus, flexible vacation, personal, sick days, and benefits that will start on day one.
• Opportunities for Community Engagement, no matter where you choose to work from, through our various programs.