The
Lead IAM Quality Assurance Engineer is responsible for ensuring the quality, security, and compliance of Identity and Access Management (IAM) solutions across enterprise applications and platforms. This role partners with IAM architects, security engineers, product owners, and application teams to validate authentication, authorization, and access governance capabilities. The ideal candidate has strong expertise in IAM technologies, security testing, and test automation, with a deep understanding of RBAC, ABAC, and PBAC models. This position plays a key role in ensuring that IAM solutions meet business, regulatory, and security requirements while delivering a seamless user experience.
Reason for opening: New Role – The recruiting efforts for this position are intended to fill an existing vacancy for a new position.
Req#1060218352
The recruiting efforts for this position are intended to fill an existing vacancy for a new position.
Responsibilities
- Lead end-to-end QA automation strategy, planning, and execution for IAM platforms and security solutions
- Design, develop, and maintain robust test plans, test cases, and Java-based BDD automation frameworks to ensure comprehensive test coverage
- Validate IAM capabilities, including SSO, MFA, Federation (SAML, OIDC, OAuth 2.0), session management, and identity lifecycle management
- Perform automated API, protocol, integration, regression, and end-to-end testing using Java-based frameworks and libraries across IAM systems
- Verify provisioning, deprovisioning, role management, entitlement management, and access governance processes while automating verification workflows and managing defects through resolution
- Partner directly with engineering teams to formalize and automate test cases, helping ensure high-quality deliverables and successful UAT execution
- Test and validate authorization models (RBAC, ABAC, and PBAC), including PDP/PEP integrations and policy enforcement mechanisms
- Contribute to continuous improvement initiatives for test automation, quality processes, and IAM testing practices
Requirements
- 5+ years of Automation QA/QE experience, including at least 3+ years supporting Identity & Access Management (IAM), cybersecurity, or identity governance initiatives
- Strong hands-on experience with Java, including proven experience developing robust automation test frameworks and test code
- Solid expertise with BDD automation frameworks and tools, including Selenium and Cucumber/Gherkin; experience with Serenity BDD is highly preferred
- Hands-on experience with IAM platforms such as Ping Identity/ForgeRock, or Okta
- Strong understanding of authentication, federation, and access management concepts, including OAuth 2.0, OpenID Connect (OIDC), SAML, session management, and MFA
- Proven experience with API and protocol test automation using REST Assured or a comparable Java-based framework; manual testing or Postman-only experience is not sufficient
- Experience integrating automated test suites into CI/CD pipelines and DevSecOps environments
- Proven experience validating authorization models and access-control workflows, including RBAC, ABAC, and PBAC
- Proactive mindset with the ability to work closely with developers to formalize and automate testing processes, ensuring testing keeps pace with development
- Strong analytical, troubleshooting, communication, and stakeholder management skills
An artificial intelligence system is software that is developed with one or more techniques that can, for a given set of human-defined objectives, using algorithmic information processing, generate outputs such as content, predictions, recommendations, or decisions with varying levels of autonomy (“AI”). Tasks that humans have traditionally done by thinking and reasoning are increasingly being done by, or with the help of, AI to help create efficiencies.EPAM may use AI during the recruitment process, in connection with collecting or processing your personal data. Some (non-exhaustive) examples of tasks that EPAM may use AI for include conducting initial screening, creating transcripts of interviews, and assessing applications/CVs against defined job description criteria to make suggestions to the individuals evaluating your candidacy.Your personal data and the results of any processing are not shared with AI applications outside of EPAM infrastructure. While EPAM may use AI to help create efficiencies during the recruitment process, EPAM does not use AI to make hiring decisions, which is done by EPAM Talent Acquisition and management.
EPAM Canada welcomes and encourages applications from candidates with disabilities. Please contact WFA Human Resource CA WFAHRCA@epam.com if you have questions in this regard, or if you require an accommodation to complete the application process. Click here to review EPAM’s Accessibility for Ontarians with Disabilities Accessibility Policies and Multi-Year Access.
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our clients, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
Engineer the Future with a Career at EPAM
