Own identity security for human and non-human identities, including AI agents, bots, service accounts, and machine credentials. Administer Okta, Entra ID, and cloud IAM; implement SSO, provisioning, governance, privileged access, credential vaulting, rotation, and zero-standing-privilege controls. Establish agent identity standards, inventory non-human identities, manage incident containment and token revocation, and create developer-facing identity policies. Requires deep IAM, authentication protocol, scripting, and workload identity expertise.
Charger logistics Inc. is a world- class asset-based carrier with locations across North America. With over 20 years of experience providing the best logistics solutions, Charger logistics has transformed into a world-class transport provider and continue to grow.
Senior IAM Engineer – Non-Human & AI Agent Identity
We are looking for a highly motivated Senior IAM Engineer to join our team based out of our Brampton office and own identity security for both people and AI agents across our company. We run Okta alongside Microsoft Entra ID, and we're extending that setup to a fast-growing number of non-human identities: AI agents, bots, service accounts and machine credentials. You'll set the standards, run the platforms, and decide how every agent in the company signs in, what it's allowed to do, and how it gets shut off.
Responsibilities:
- Own our Okta environment end to end: SSO, SCIM provisioning, Identity Governance and Privileged Access.
- Roll out and run Okta's AI agent capabilities, including Agent SSO, Cross App Access (XAA/MCP patterns) and lifecycle governance for agents.
- Lead discovery of all non-human identities through Identity Security Posture Management (ISPM): service accounts, API keys, tokens and unsanctioned "shadow" AI agents. Own the baseline inventory.
- Set and enforce our agent identity standards: a dedicated identity for each autonomous workload, a named human owner, least-privilege access, short-lived credentials and no shared logins.
- Build credential vaulting, rotation and zero-standing-privilege patterns for machine identities.
- Own incident containment for agent identities, including a central token-revocation "kill switch."
- Connect identity across Okta, Entra ID and Google Cloud IAM, working with our platform team on agent identity in GCP.
- Write the developer-facing standards: how teams request an agent identity, what they get, and what's not allowed.
Requirements
- 5+ years in identity and access management, with deep hands-on Okta administration. An Okta Certified Professional, Administrator or Consultant certification is a strong plus.
- Strong working knowledge of Entra ID (Azure AD) in a hybrid environment.
- A deep understanding of how OAuth 2.0, OIDC and SAML actually work, beyond configuring them.
- Experience managing non-human identities: service accounts, secrets, API keys and workload identity.
- Hands-on experience with identity governance, privileged access management and SCIM lifecycle automation, on Okta or comparable platforms (e.g., SailPoint, CyberArk, BeyondTrust, HashiCorp Vault).
- Python or PowerShell scripting against identity APIs.
Nice to Have
- Exposure to AI agent identity: Okta for AI Agents, Microsoft Entra Agent ID, SPIFFE/SPIRE, or MCP/agent authorization patterns.
- Experience with non-human identity security tools such as Oasis, Astrix, Token Security or Aembit.
- Google Cloud IAM or workload identity federation.
- Infrastructure-as-code for identity, such as Terraform for Okta or Okta Workflows.
- Zero-trust access tools such as Zscaler, Cloudflare or Tailscale.
- Experience in transportation, logistics, supply chain or another 24/7 operations environment.
Benefits
- Competitive Salary
- Healthcare Benefit Package
- Career Growth
Charger Logistics Brampton, Ontario, CAN Office
25 Production Road, Brampton, Ontario, Canada, L6T4N8
Charger Logistics Cambridge, Ontario, CAN Office
Cambridge, Canada
Similar Jobs
One Month Ago
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Design, develop, and maintain enterprise authentication capabilities on a Unified Authentication Platform. Integrate IAM platforms (Ping, IBM ISAM), implement Passkeys (FIDO2/WebAuthn), MFA, OAuth2/OIDC/SAML token lifecycle, REST APIs, and directory integrations. Apply secure coding and collaborate with architecture and DevSecOps teams to deliver scalable, secure identity solutions.
Top Skills:
Active DirectoryApi SecurityFido2Ibm IsamIbm IsvaJavaJwtLdapMfaOauth 2.0Oauth/Oidc Token ManagementOpenid Connect (Oidc)Ping IdentityPingfederatePingoneRest ApisSAMLSpring BootWebauthnZero Trust
Automotive
Conduct confidential employee relations investigations involving discrimination, harassment, retaliation, and policy violations. Develop investigation plans, prepare reports, recommend outcomes, manage case documentation, and support grievance, arbitration, and litigation processes. Partner with HR, legal, outside counsel, and business leaders on discipline, performance management, and compliance. Coach employees on HR policies, analyze case trends, and promote an ethical, inclusive workplace while traveling to Ford of Canada locations as needed.
Healthtech • Information Technology • Security • Software • Cybersecurity
Own the strategy, roadmap, and delivery of shared IAM cloud services across product lines. Define platform vision, requirements, adoption plans, and success metrics while partnering with Engineering, Security, Privacy, DevOps, Customer Success, and product teams. Drive interoperability through OIDC, SAML, SCIM, and APIs; improve reliability, security, adoption, and customer outcomes. Communicate priorities and tradeoffs to executives and stakeholders, and guide product-management practices for shared platform services.
Top Skills:
Ai-Assisted WorkflowsAPIsBiometric Identity VerificationCloud ComputingDevOpsDirectory SynchronizationFacial AuthenticationFederationIdentity And Access Management (Iam)MfaObservabilityOidcPasswordless AuthenticationSaaSSAMLScimSdksSlosTenant Isolation
What you need to know about the Toronto Tech Scene
Although home to some of the biggest names in tech, including Google, Microsoft and Amazon, Toronto has established itself as one of the largest startup ecosystems in the world. And with over 2,000 startups — more than 30 percent of the country's total startups — Toronto continues to attract new businesses. Be it helping entrepreneurs manage their finances, simplifying business operations by automating payroll or assisting pharmaceutical companies in launching new drugs, the city's tech scene is just getting started.
