IAM Analyst – SoD / Toronto, ON (Onsite – 4 Days/Week) - FTE

Role: IAM Analyst – SoD

Location: Toronto, ON

Work Arrangement: Onsite – 4 Days/Week

Role Overview

We are seeking an experienced IAM Analyst – SoD with strong hands-on expertise in SailPoint IIQ/ISC, Identity Governance & Administration (IGA), Segregation of Duties (SoD), and Role-Based Access Control (RBAC).

The ideal candidate will be responsible for analyzing and implementing access governance controls, validating SoD policies and violations, supporting RBAC initiatives, onboarding applications into SailPoint, and performing IAM testing and reconciliation. This role requires close collaboration with IAM developers, application teams, business owners, security, risk, and compliance stakeholders.

Key Responsibilities

• Develop, maintain, and validate SoD policies, rules, conflict matrices, violations, exceptions, and remediation processes.
• Gather and analyze RBAC requirements, including business roles, IT roles, entitlement mapping, role hierarchies, and access models.
• Review and validate user, role, and entitlement assignments and assess their impact on SoD and access governance controls.
• Perform SailPoint application and connector onboarding, including account aggregation, correlation, entitlement aggregation, and verification.
• Configure and maintain SailPoint workflows, rules, scripts, and other IAM configurations.
• Develop and troubleshoot SailPoint rules using Java/BeanShell and related technologies.
• Perform functional, integration, regression, RBAC, and SoD testing for IAM solutions.
• Validate source-system data against SailPoint and perform account, entitlement, and access reconciliation.
• Investigate and analyze SoD violations, support remediation activities, and manage approved exceptions.
• Perform data analysis using SQL to validate accounts, roles, entitlements, and IAM transactions.
• Prepare SoD, RBAC, application onboarding, QA, reconciliation, and management reports.
• Identify data, configuration, and access-control issues and work with technical teams to resolve them.
• Create and track defects, requirements, and tasks using JIRA.
• Collaborate with IAM developers, application owners, business stakeholders, security teams, and compliance teams to ensure effective access governance.

Mandatory Requirements

• Strong hands-on experience with SailPoint IdentityIQ (IIQ) and/or Identity Security Cloud (ISC).
• Proven experience with SoD, IGA, access governance, and compliance controls.
• Strong knowledge of RBAC, role modeling, entitlement management, and access certification.
• Experience with SailPoint application onboarding, connectors, aggregation, correlation, accounts, and entitlements.
• Hands-on experience developing or troubleshooting SailPoint rules, workflows, and scripts using Java/BeanShell.
• Strong SQL skills for IAM data validation and reconciliation.
• Experience in IAM functional, integration, regression, RBAC, and SoD testing.
• Experience with account/entitlement reconciliation and SoD violation analysis.
• Working knowledge of JIRA for defect, task, and requirement tracking.
• Strong analytical, troubleshooting, documentation, and stakeholder communication skills.

Preferred Qualifications

• Experience working in banking or financial services environments.
• Knowledge of IAM compliance frameworks and access-control governance.
• Experience supporting audit, risk, compliance, and exception-management processes.
• Familiarity with enterprise application integrations and identity lifecycle management.
• Experience working in Agile/DevOps environments.

Core Must-Have Skills

SailPoint IIQ/ISC | SoD/IGA | RBAC | Java/BeanShell + SQL | IAM QA/Testing