IAM Analyst - SOD

Role overview

Work model

• The posting states onsite / 4 days in Toronto, indicating four office days and a hybrid work model.

Responsibilities

• Maintain SoD rules, policies, conflict matrices, violations, and remediation plans; gather RBAC needs and assess roles, entitlements, hierarchies, and access models.
• Validate role and entitlement assignments against SoD controls; onboard and verify SailPoint applications and connectors, aggregation, correlation, accounts, and entitlements.
• Develop and maintain SailPoint rules, workflows, configurations, and scripts; perform functional, integration, regression, RBAC, and SoD testing.
• Validate source data and reconcile accounts and entitlements; analyze SoD violations and support remediation and exceptions.
• Prepare SoD, RBAC, QA, application-onboarding, and management reports; collaborate to resolve governance issues and support control validation, audits, and improvement.

Required skills and experience

• Strong hands-on experience with SailPoint IIQ and/or SailPoint Identity Security Cloud (ISC).
• Strong understanding of SoD, IGA, access governance, RBAC, role engineering, entitlement mapping, and access models.
• Experience with SailPoint application and connector onboarding, aggregation, correlation, accounts, and entitlements.
• Experience developing or maintaining SailPoint rules, workflows, and configurations; strong Java, BeanShell, and/or SailPoint scripting knowledge.
• Strong SQL skills, testing experience, and experience with JIRA and defect or issue tracking.
• Strong analytical and problem-solving abilities, communication, and collaboration skills.

Preferred skills

• IAM compliance, audit, and access certification experience is preferred.
• Identity lifecycle management, entitlement governance, SoD exceptions and remediation, and IAM or management reporting experience are preferred.