Identity Access Management Consultant - Junior

Job Title: Identity Access Management Consultant - Junior
Project: GO-PKI Sustainment
Location: Toronto, Ontario
Work Model: Onsite
Duration: 6 Months
Security Clearance: CRJMC
Submission Deadline: 2026-07-17, 12:00 p.m. EST

Supplier Comments / MSP Notes

Must Haves

• 10+ years experience sustaining COTS-based Identity and Access Management (IAM) systems including:
• Administration
• Operations
• Monitoring
• Support
• Patching
• Start/Stop activities
• At least 4 years experience supporting IAM environments with more than 10,000 registered users.
• 10+ years experience with:
• Entrust PKI Suite
• Oracle Identity Manager (OIM)
• LDAP technologies
• IIS
• Apache/NGINX
• Oracle Database
• WebLogic
• Linux, Solaris, AIX, and Windows
• ITIL process experience:
• Service Management
• Problem Management
• Change Management
• Release Management
• Capacity Management

Project Overview

The Identity and Access Management Practice (IAMP) requires two resources to support sustainment and modernization of the Government of Ontario Public Key Infrastructure (GO-PKI).

The engagement supports:

• GO-PKI sustainment
• PKI modernization
• Certificate Authority upgrades
• Disaster Recovery implementation
• Identity and Access Management integrations
• Entrust Managed Cloud Services transition

Responsibilities

GO-PKI Sustainment & Modernization

Support development, UAT, and production environments including:

• Upgrade Entrust CA from v8.2.40 to v10.
• Support migration to Entrust Managed Cloud Services.
• Implement Disaster Recovery environments.
• Configure Hardware Security Modules (HSMs).
• Migrate Atos DirX to Oracle Unified Directory (OUD).
• Execute Proof-of-Concepts for Entrust Managed Cloud Services.

Operational Support

• Monitor health and performance of GO-PKI environments.
• Start and stop service components.
• Manage backups and recovery.
• Apply patches and certificates.
• Perform tuning activities.
• Maintain service availability.

Incident & Problem Management

• Analyze and resolve incidents.
• Troubleshoot application issues.
• Support production and non-production environments.
• Participate in root cause investigations.

On-Call Support

Production Support

• 24x7 support for Production GO-PKI environments.
• 5x10 support for Non-Production environments.

ITIL Activities

• Incident Coordinator
• Incident Analyst
• Change Coordinator
• Change Analyst
• Tier-2 / Tier-3 SME

Infrastructure & Technology Support

Support applications utilizing:

IAM & PKI Platforms

• Entrust PKI Suite
• Entrust Security Manager
• Entrust Security Manager Proxy
• Entrust Admin Services
• Entrust Automated Enrollment Services (AES)

Identity Management

• Oracle Identity Manager (OIM)
• Oracle Unified Directory (OUD)
• LDAP Technologies
• Atos DirX
• Apache Directory Studio

Application Technologies

• IIS
• Apache HTTPD
• IBM Web Server
• NGINX
• Oracle WebLogic

Databases

• Oracle Database 11g+
• SQL

Operating Systems

• Windows
• Linux
• Solaris
• AIX

Network Infrastructure

• Load Balancers
• Firewalls
• Proxy Servers
• Gateways
• Routers

Client Integration Support

Support OPS and BPS organizations integrating with GO-PKI by:

• Gathering technical requirements.
• Designing integration solutions.
• Defining integration patterns.
• Building and testing integrations.
• Deploying IAM solutions.
• Troubleshooting integration issues.
• Developing utilities, scripts, reports, and automation.
• Producing technical documentation.

Support Tool Development

• Define support tool requirements.
• Evaluate and recommend tools.
• Install and configure tools.
• Develop:
• Scripts
• Reports
• Queries
• Procedures
• Automation solutions
• Document operational procedures.

Disaster Recovery

Support definition and implementation of:

• Disaster Recovery Architecture
• Operational DR Procedures
• Testing and Validation Activities
• Recovery Documentation

System Management

Define and implement:

• Monitoring processes
• Event management
• Alerting
• Metrics and thresholds
• Operational procedures
• Infrastructure coordination processes

Knowledge Transfer

Support development of:

• Support role definitions
• Knowledge transfer plans
• Skills transfer plans
• Sustainment transition plans
• Training materials
• Operational procedures

Provide ongoing knowledge transfer to OPS staff.

Experience & Skill Set Requirements

Large Application Solutions & Technologies – 50%

• 10+ years supporting enterprise IAM/PKI solutions.
• 10+ years designing, deploying, and sustaining large-scale applications.
• Experience supporting environments with 10,000+ users.
• Strong troubleshooting and operational support experience.
• ITIL framework experience.
• Automated testing tool experience:
• TFS
• Robot Framework
• GOSS
• SikuliX
• VSTS
• Strong communication and interpersonal skills.

Large Identity & Access Management Systems – 30%

• Minimum 4 years working with Entrust PKI Suite.
• Experience with:
• Security Manager
• Security Manager Proxy
• Admin Services
• AES
• Strong understanding of:
• PKI
• SSL
• Authentication Technologies
• Encryption Technologies
• PMI

Quality Assurance & Release Management – 20%

• 10+ years applying QA methodologies.
• Incident and Problem Management leadership experience.
• Experience supporting large enterprise implementations.
• Quality and release management processes.