Senior Cloud IAM Engineer (Microsoft Entra ID & AWS)

Role Description

Senior Cloud IAM Engineer (Microsoft Entra ID & AWS)

Who We Are

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you’ll create a boundless impact that transforms your career - and the lives of people across the world.

Visit us at UST.com.

You Are

UST is searching for a Senior Cloud IAM Engineer who will design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.

The Opportunity

• Serve as the Subject Matter Expert (SME) for Microsoft Entra ID and Cloud Identity Services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
• Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
• Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 standards to enable secure access across cloud and SaaS platforms.
• Manage cloud identity and access controls across AWS and Azure, including IAM roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
• Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
  
  

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What You Need

• 8+ years of IAM, Cybersecurity, or Cloud Security experience, including 5+ years with Microsoft Entra ID, Azure, and AWS IAM.
• Education
• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related field.
• Required Skills
• Microsoft Entra ID (Azure AD)
• Azure IAM & RBAC
• AWS IAM (Roles, Policies, Cross-Account Access)
• Single Sign-On (SSO)
• SAML, OAuth 2.0, OpenID Connect (OIDC)
• Conditional Access & MFA
• Privileged Identity Management (PIM)
• Identity Governance & Access Reviews
• Azure Key Vault & AWS Secrets Manager
• Zero Trust Security
• PowerShell and/or Python Automation
• Terraform / Infrastructure as Code (IaC)
• Active Directory & Hybrid Identity
• Cloud Security & Compliance
  
  

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Etobicoke, Canada

Compensation Range: $104,000-$130,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), paid holidays, and are eligible for paid bereavement leave and jury duty. They and their dependents residing in Canada are eligible for Supplemental Healthcare coverage, as well as Company-paid Employee Only basic life insurance and accidental death and dismemberment coverage.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year). They and their dependents residing in Canada are eligible for Supplemental Healthcare coverage, as well as Company-paid Employee Only basic life insurance and accidental death and dismemberment coverage.

Part-time regular and temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All Canadian employees who work in a province, territory or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

Artificial Intelligence in Recruitment

As part of our recruitment process, UST may use AI or automated tools to support activities such as application screening, scheduling, or interview assistance. All hiring decisions are made by our recruitment team. Where applicable law requires it, further notice will be provided separately.

L’intelligence artificielle en soutien au recrutement

Dans le cadre de son processus de recrutement, il se peut que UST peut utiliser ait recours à l'intelligence artificielle ou à des outils automatisés réaliser des en soutien à des activités telles que l’examen comme la présélection des candidatures, la planification ou l'assistance lors des entrevues ou leur bon déroulement. Toutes les décisions d'embauche sont prises par notre équipe de recrutement. Lorsque la législation applicable l'exige, un avis supplémentaire à cet égard sera fourni séparément.

What We Believe

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity

Through business, we will better the lives of those less fortunate than ourselves.

Integrity

We honor our commitments and act with responsibility in all our relationships.

An Equal Opportunity Workplace, Free of Discrimination and Harassment

At UST, we strive to provide a work environment free of discrimination and harassment. We are an equal opportunity employer, and employment decisions are based on merit and business needs. Our Human Rights Policy further illustrates our stand on this. We are committed to following fair employment practices that provide equal opportunities to all employees. We do not discriminate or allow harassment on the basis of race, color, religion, disability, gender, national origin, sexual orientation, gender identity, gender expression, age, genetic information, military status, or any other legally protected status. At UST, we value diversity and believe that a diverse workplace builds a competitive advantage.

Un lieu de travail à égalité des chances, sans Discrimination et harcèlement

Chez UST, nous nous efforçons de fournir un environnement de travail exempt de discrimination et harcèlement. Nous sommes un employeur garantissant l'égalité des chances et des décisions en matière d'emploi sont basés sur le mérite et les besoins de l'entreprise. Notre politique en matière de droits de l'homme illustre notre position à ce sujet. Nous nous engageons à respecter un emploi équitable des pratiques qui offrent des chances égales à tous les employés. Nous ne faisons pas discriminer ou permettre le harcèlement sur la base de la race, de la couleur, de la religion, du handicap, genre, origine nationale, orientation sexuelle, identité de genre, expression de genre, âge, informations génétiques, statut militaire ou tout autre statut légalement protégé. Chez UST, nous valorisons la diversité et pensons qu'un lieu de travail diversifié crée un avantage compétitif.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST

Skills

AWS, AWS Secrets Manager, Azure Managed Identity, Compliance Management