Senior ICAM Technical Architect - Identity Federation

Location: Ottawa (Primarily remote with occasional on-site) Duration: 2 years + 6 months optional extension Security Clearance: Secret, Reliability and Controlled Goods Responsibilities Define interface requirements when accessing or providing information to external systems. Engage stakeholders to identify business requirements, set priorities, and gather feedback on design proposals. Analyze and evaluate alternative technology solutions that are viable within operational and security constraints. Lead system design to ensure that target applications and the technical architecture meet non-functional requirements. Guide and support roadmap evolution, including the adoption of Zero Trust principles and Data-Centric Security. Provide direction on emerging technologies and industry trends to align ICAM solutions with government and industry standards, policies, and best practices. Gather and analyze integration requirements and lead the design of the system integration plan, including architecture and project resourcing. Provide a clear roadmap and detailed guidance to integrate enterprise SSO/Identity Provider with existing systems such as PKI, Active Directory, and other authentication and target systems. Lead and coordinate the integration and delivery of ICAM solutions into production on unclassified and classified networks. Analyze and optimize ICAM-related business processes, identifying opportunities for automation and streamlined workflows. Create and maintain detailed technical documentation, including system architecture diagrams, configuration guides, and operational manuals. Provide supporting information for Request for Change (RFC) and Security Assessment and Authorization (SA&A) submissions, and deliver weekly progress reports. Qualifications 10+ years of experience within the last fifteen (15) years designing, configuring, and maintaining IM/IT systems with a user base of at least 5,000 people. 7+ years of experience within the last ten (10) years designing, implementing, integrating, and supporting an Identity Provider (IdP)/Single Sign-On (SSO) solution for over 4,000 active users. Experience within the last ten (10) years producing ICAM project documentation, including Concept of Operations (CONOPS), technical architecture documentation, system design documents, build/configuration documents, system integration plans and Test plans/Test cases and reports. 1+ year of experience briefing senior managers (Director level and above) on IT security implications and recommended courses of action. Experience within the last five (5) years architecting and/or implementing an Identity Provider solution for a solution with a minimum of 1,000 users. Experience within the last five (5) years architecting or deploying ICAM solutions around cloud architecture for a solution with a minimum of 1,000 users. Certification or 2+ years of experience within the last five (5) years with technologies or methodologies such as SSO/Federation, Identity Lifecycle Management, IGA, PAM, and PKI. 6+ months of experience designing IT solutions requiring interoperability with one or more government departments and/or international partners (US, UK, AUS, NZ). Education: A degree from a recognized university in a science, mathematics, engineering, or IM/IT field, or a diploma (minimum 2 years) from a recognized college in a science, mathematics, engineering, or IM/IT field. AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team. OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities. Accommodations are available upon request for candidates taking part in all aspects of the recruitment process. We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.

The Senior ICAM Technical Architect will define interface requirements and engage stakeholders to gather feedback on design proposals. They will lead system design and guide the evolution of ICAM solutions to align with industry standards and best practices.

Candidates must have over 10 years of experience in designing and maintaining IM/IT systems, with specific expertise in Identity Provider and Single Sign-On solutions. A degree in a relevant field is required, along with experience in producing ICAM project documentation and briefing senior management on IT security.

Identified from the job description. Confirm important requirements above.

• Identity Federation
• Identity Provider
• Single Sign-On
• System Design
• Technical Architecture
• Integration
• Zero Trust Principles
• Data-Centric Security
• Technical Documentation
• Automation
• Security Assessment
• Project Management
• Cloud Architecture
• Interoperability
• IT Security
• Business Requirements

Minimum education

Bachelor’s degree

Minimum experience

10+ years

Apply by

Aug 16, 2026