Senior Security Engineering Developer – Identity and Access Management (IAM)

Capco

Senior Security Engineering Developer designing authentication solutions for financial institutions at Capco. Working on modern Identity and Access Management (IAM) technologies and secure backend development.

Posted 7/21/2026full-timeToronto • 🇨🇦 CanadaSenior💰 CA$118,000 - CA$135,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure authentication solutions, including Multi-Factor Authentication (MFA) and Passkey (FIDO2/WebAuthn) integration. Proficient in developing REST APIs and managing OAuth 2.0/OIDC token lifecycles while applying secure coding practices.

Highest-signal resume keywords

Java/Spring BootPing IdentityOAuth 2.0Multi-Factor Authentication (MFA)RESTful APIs

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

JavaSpring BootOAuth 2.0OpenID Connect (OIDC)SAMLJWTRESTful APIsFIDO2/WebAuthnMulti-Factor Authentication (MFA)Secure Coding Practices

Tools & Technologies

Ping IdentityIBM ISAMLDAPActive Directory

Industry Keywords

Identity Access Management (IAM)Zero Trust SecurityAuthentication PatternsToken ManagementEnterprise Security Services

Tech Stack

Tools & technologies

JavaSpringSpring BootSpringBoot

About the role

Key responsibilities & impact

Design, develop, and maintain capabilities on the Unified Authentication Platform.
Integrate enterprise IAM solutions such as Ping Identity, IBM Security Verify Access (ISAM), or similar authentication platforms.
Develop and implement Passkey (FIDO2/WebAuthn) authentication and associated backend services.
Build and integrate Multi-Factor Authentication (MFA) capabilities, including adaptive authentication workflows.
Develop secure REST APIs and integrate authentication services with enterprise applications. Implement and manage OAuth 2.0/OIDC token lifecycle, including token issuance, validation, refresh, and revocation.
Integrate with enterprise security services, directories, and legacy authentication platforms such as IBM ISAM. Apply secure coding practices and security engineering principles to authentication and authorization services.
Collaborate with architecture, application, and DevSecOps teams to deliver secure, scalable identity solutions.

Requirements

What you’ll need

Strong experience in Java/Spring Boot (or equivalent backend technologies).
Experience with Ping Identity, PingFederate, PingOne, IBM ISAM/ISVA, or similar IAM platforms.
Hands-on experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWT, and token management.
Experience implementing Passkeys (FIDO2/WebAuthn) and Multi-Factor Authentication (MFA).
Strong knowledge of RESTful APIs, API security, and authentication patterns.
Experience integrating enterprise directories (LDAP/Active Directory) and identity services.
Good understanding of Zero Trust security principles and modern authentication architectures.

Benefits

Comp & perks

Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment
Retirement Savings Program – Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution
Virtual Health Care – Company-paid program available to all employees and their dependents/partners
Employee & Family Assistance Program (EFAP) – Company-paid support services for employees and their dependents/partners
Parental Leave Top-Up – Enhanced parental leave benefits available from Day 1 of employment
New Parent Gift – A company-sponsored gift to celebrate the arrival of a new child
Wellness Support – Fitness reimbursement benefit to promote health and well-being
Business Coach from Day 1: Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.