Identity and Access Management Designer

Purpose:

The Identity & Access Management Designer is a technology and solution subject matter expert with deep pragmatic experience and passion for the Identity and Access domain as well as other relevant information security domains. Reporting to the Senior Manager, Identity and Access Management, this role serves as an expert technical resource for the planning, design, configuration, integration, testing and ongoing evolution of IAM solutions and services. The role provides guidance on IAM standards, solution design, workflows, controls, technical patterns and best practices to support secure, scalable and sustainable identity services, improving the user experience, and supporting the long-term evolution of IAM services at the University. The IAM Designer collaborates closely with both technical and non-technical partners across the University to effectively translate the IAM objectives into specific identity and access management workflows enabled by York University's IAM technologies and services.

Education:

Bachelor's degree in a relevant discipline, such as Computer Science, Information Systems, or Cybersecurity or an equivalent of 4 years recent experience (defined as within the last five years) working at York University and performing the same or similar tasks. This education equivalency is in addition to the experiential requirements outlined below.

Experience:

7 years related experience with the development, implementation, and operation of identity management systems and related technologies

Extensive experience designing, implementing, maintaining, administering and troubleshooting SailPoint IdentityIQ solutions, including complex workflows, integrations and identity lifecycle processes

Experience integrating SailPoint with directories, applications, and cloud platforms using REST/SOAP APIs

Experience with enterprise identity platforms such as Microsoft Entra ID (Azure AD), including authentication, authorization, and identity governance capabilities

Experience scripting using Beanshell, Java, SQL, XML, JSON

Experience with Linux/UNIX systems and LDAP directories

Experience with user provisioning, de-provisioning, and access certification workflows

Skills:

Effective communication skills.

Ability to present complex technical materials to non-technical business partners and executives.

Ability to work closely with business and IT teams to align IAM strategies with organizational goals.

Ability to work with operating systems and middleware security software/tools.

Ability to solve large complex IT and business problems that are often ambiguous, conceptual and/or ill-defined.

Effective project coordination skills.

Ability to apply judgment, discretion, technical problem-solving, and analytical skills.

Ability to work as a team member and establish effective working relationships.

Ability to build relationships and bring together individuals with different perspectives and opinions toward a common goal.

Commitment to continuous learning and skill building in DEDI and cultural competence.

Effective interpersonal skills, including listening and questioning skills.

Ability to maintain strict confidentiality.

Ability to accomplish goals through influence without direct authority.

Ability to navigate and work effectively in a dynamic work environment with frequent change.

Ability to interpret regulatory standards and technical specifications.

Ability to design scalable and secure IAM frameworks, procedures, and best practices.

Expertise in implementing and managing role-based and attribute-based access models.

Effective knowledge of IAM principles, practices, and standards as applicable in a multi-faceted organization supported by multi-platform technical environments.

Deep understanding of IAM architecture, lifecycle events, workflows, and connectors.

Familiarity with NIST, CIS, and industry IAM frameworks.

Knowledge of identity threats, zero-trust models, and IAM risk mitigation strategies.

Awareness of IT infrastructure, cloud security, and hybrid IAM deployment models.

Knowledge of relational databases (SQL) and directory services (Active Directory, LDAP) in IAM implementations.

Effective knowledge of Active Directory, LDAP, SSO, MFA, and authentication protocols (SAML, OAuth, OpenID Connect).

Knowledge of managing CI/CD pipelines and automating tasks using tools such as Ansible