Senior Analyst – SailPoint / IAM // Toronto ON// FTE

Senior Analyst – SailPoint / IAM

Location: Toronto, ON

Work Model: Onsite – 4 Days per Week

Experience: 7+ Years

Employment Type: Full-Time

Role Overview

We are seeking an experienced Senior Analyst – SailPoint / IAM to join our Identity and Access Management team. The successful candidate will have strong hands-on experience with SailPoint IdentityIQ (IIQ) and/or SailPoint Identity Security Cloud (ISC) and will be responsible for supporting enterprise identity governance, access management, application integrations, and production operations.

This role requires a strong understanding of Identity Governance and Administration (IGA), Joiner-Mover-Leaver (JML) processes, provisioning, access certifications, RBAC, SoD controls, application onboarding, and IAM production support. The candidate will work closely with application owners, security teams, infrastructure teams, auditors, and other technology stakeholders.

Key Responsibilities

SailPoint Administration & Production Support

•

Provide L2/L3 operational and production support for SailPoint IdentityIQ and/or Identity Security Cloud.

•

Monitor SailPoint platform health, scheduled jobs, aggregations, workflows, provisioning activities, and connectors.

•

Investigate and resolve SailPoint-related incidents, service requests, problems, and production issues within defined SLAs.

•

Perform troubleshooting and root-cause analysis for failed provisioning, aggregation, workflow, connector, and integration issues.

•

Support SailPoint configuration changes, releases, patches, and production deployments.

•

Maintain operational documentation, troubleshooting guides, and support procedures.

Identity Lifecycle Management

•

Support end-to-end Joiner-Mover-Leaver (JML) processes.

•

Manage identity creation, modification, suspension, termination, and deprovisioning activities.

•

Support automated and manual account provisioning and deprovisioning.

•

Perform account aggregation, reconciliation, correlation, and identity refresh activities.

•

Investigate identity and account correlation issues and ensure accurate identity data.

Application Onboarding & Integrations

•

Perform onboarding and offboarding of enterprise applications into SailPoint.

•

Configure and troubleshoot application connectors and integration processes.

•

Support integrations with Active Directory, LDAP, JDBC databases, REST APIs, Web Services, and other enterprise applications.

•

Validate account aggregation, entitlement discovery, provisioning, and deprovisioning functionality.

•

Work with application owners to gather technical requirements and resolve integration issues.

•

Support connector configuration, testing, troubleshooting, and production implementation.

Access Governance

•

Support access requests, approvals, role management, entitlement management, and access certifications.

•

Participate in periodic access review and certification campaigns.

•

Support Role-Based Access Control (RBAC) and entitlement mapping activities.

•

Assist with Segregation of Duties (SoD) controls, conflict identification, and remediation.

•

Investigate inappropriate or conflicting access and coordinate remediation with relevant stakeholders.

•

Ensure IAM processes align with organizational security policies and regulatory requirements.

Incident, Problem & Change Management

•

Manage SailPoint incidents and service requests through enterprise ITSM processes.

•

Perform detailed troubleshooting and root-cause analysis for recurring issues.

•

Participate in problem management and identify opportunities to prevent recurring incidents.

•

Support change requests, release activities, testing, and production deployments.

•

Ensure changes follow established governance, approval, and documentation procedures.

•

Provide timely status updates and communicate technical issues to relevant stakeholders.

Compliance & Audit Support

•

Support internal and external IAM, security, and compliance audits.

•

Provide access governance reports, certification evidence, audit artifacts, and required documentation.

•

Support periodic access reviews and compliance campaigns.

•

Ensure IAM processes and controls meet applicable organizational and regulatory requirements.

•

Work with security and audit teams to address access governance findings.

Automation & Continuous Improvement

•

Identify opportunities to automate repetitive IAM operational processes.

•

Develop or maintain scripts using Java, BeanShell, PowerShell, SQL, or other scripting technologies.

•

Improve operational procedures, monitoring, reporting, and troubleshooting processes.

•

Contribute to initiatives that improve SailPoint platform stability, scalability, and operational efficiency.

Required Skills & Qualifications

•

7+ years of experience in Identity and Access Management, Identity Governance, or related technology areas.

•

Strong hands-on experience with SailPoint IdentityIQ (IIQ) and/or SailPoint Identity Security Cloud (ISC).

•

Strong understanding of IAM/IGA concepts and identity lifecycle management.

•

Experience with Joiner-Mover-Leaver (JML) processes.

•

Strong knowledge of provisioning, deprovisioning, account aggregation, reconciliation, and access certifications.

•

Experience with RBAC, entitlement management, and SoD controls.

•

Hands-on experience with Active Directory and LDAP.

•

Experience integrating applications using JDBC, REST APIs, Web Services, and enterprise application connectors.

•

Working knowledge of SQL and database concepts.

•

Basic to intermediate scripting/programming knowledge in Java, BeanShell, PowerShell, or similar technologies.

•

Strong experience with incident, problem, and change management processes.

•

Excellent troubleshooting, analytical, documentation, and communication skills.

Preferred Skills

•

SailPoint IdentityIQ / ISC certification.

•

Experience with SailPoint workflows, rules, transforms, lifecycle events, connectors, and customizations.

•

Experience in large-scale enterprise or financial-services IAM environments.

•

Knowledge of ServiceNow or other ITSM platforms.

•

Experience supporting access governance and regulatory compliance requirements.

•

Familiarity with security frameworks and IAM audit controls.

•

Experience with IAM monitoring, reporting, and operational dashboards.

•

Knowledge of cloud-based IAM and modern identity governance practices.

Education

•

Bachelor's degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related discipline.

•

Relevant SailPoint, IAM, cybersecurity, or industry certifications are an asset.

Key Competencies

•

Strong problem-solving and troubleshooting ability.

•

Excellent communication and stakeholder-management skills.

•

Ability to work independently in a production-support environment.

•

Strong attention to detail and commitment to security and compliance.

•

Ability to manage multiple incidents, requests, and priorities simultaneously.

•

Strong documentation and analytical skills.

•

Ability to collaborate effectively with application owners, security teams, infrastructure teams, auditors, and business stakeholders.

Mandatory / Must-Have Skills

1.

SailPoint IdentityIQ (IIQ) / Identity Security Cloud (ISC)

2.

IAM / IGA & JML Lifecycle Management

3.

Application Onboarding & SailPoint Integrations

4.

RBAC, Access Certifications & SoD

5.

L2/L3 Production Support & Troubleshooting

Work Location

Toronto, Ontario – Onsite 4 Days per Week