Product Security Engineer II - IAM

Description

The company offers pay-over-time financing to its customers.

The InfoSec team protects the company's systems and data from changing threats. It handles security risk, vulnerability monitoring, protective controls, incident response, compliance, identity and access management, and employee training.

The team is building the next generation of enterprise identity and access management. The work mixes hands-on IAM operations, automation, and production software engineering to make identity services more dependable, scalable, and easier to run.

Software engineering is required. The main work centres on SailPoint and enterprise identity integrations, with some CIAM-adjacent Auth0 work where enterprise systems meet customer identity.

This suits an engineer who wants to build deep IAM skills while still writing code every day.

Responsibilities

• Run and improve IAM operations, covering access lifecycle tasks, access requests, certifications, and issue resolution.
• Automate repetitive work with scripts, services, and workflow changes.
• Build and maintain production backend software, APIs, tests, and integrations.
• Connect SailPoint and workforce identity events to internal systems.
• Create a paved path that lets employees build internal tools on Auth0.
• Work with Security, IT, and Engineering to make secure, auditable changes.
• Keep runbooks and operational metrics current, and provide escalation support.
• Typical problems include fixing a provisioning workflow by adding monitoring or retries, reconciling access between source systems and SailPoint, building an API integration for identity lifecycle events, and creating reusable Auth0 patterns, tooling, and documentation for internal applications.

Requirements

• At least 2 years of software engineering experience, or equivalent internship or co-op experience backed by strong projects.
• Ability to write, test, and run production-quality backend code in Python or a similar language.
• Solid grounding in APIs, debugging, logging, error handling, and distributed systems.
• Hands-on experience with GitHub, CI/CD, testing, and code review.
• Willingness to own operational work and troubleshoot production issues.
• Familiarity with cloud environments.
• Preferred: AWS experience.
• Clear written communication and documentation skills.
• Exposure to IAM, IGA, SSO, SAML, OIDC, SCIM, RBAC, or identity governance.
• Experience with SailPoint, Auth0, Okta, OneLogin, or similar platforms.
• Experience with Terraform or other infrastructure-as-code tools.
• Familiarity with audit or compliance environments.

Conditions

Base pay grade is L and equity grade is Canada 5.

Base pay ranges from $133,000 to $183,000 CAD per year.

New hires usually start near the bottom of the range. Pay depends on location, experience, and job-related skills.

Base pay is part of a total compensation package that may also include monthly stipends and benefits.

This remote role is open only to residents of Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.

The company is remote-first, and most roles can be done from almost anywhere in the country of employment. Some roles may occasionally need in-person work at an office, and a few are office-based. All new hires are invited to an in-person onboarding.

Interview accommodations are available for candidates with disabilities, and the company considers applicants with arrest and conviction records for San Francisco or Los Angeles roles, as the law requires.

Benefits

• Medical coverage with 100% of premiums paid for you and your dependents, plus dental and vision coverage.
• Monthly stipends for tech setup and for health and wellness choices that suit you.
• Flexible time off and a generous holiday calendar.
• An employee stock purchase plan that lets you buy company stock at a discount.
• You may be eligible for equity rewards from the parent company.