IAM Ops Engineer: Identity Lifecycle & Access Governance

Cognizant; Oakville; On-site; CAD 98,000 - 115,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays + Paid Time Off

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant Technology Solutions Corporation, Oakville, Canada, seeks an experienced IAM Operations Engineer to manage the identity lifecycle, JML, and access governance across Microsoft Entra ID, Active Directory, Ping Identity, and other enterprise platforms. The ideal candidate will leverage SailPoint IdentityIQ and SAP GRC for entitlement analysis and maintain audit-ready documentation.

Responsibilities include provisioning, role-based access control, certification campaigns, and

Qualifications

• 5–8 years of IAM Operations experience.
• Strong JML, provisioning, deprovisioning, RBAC, SoD.
• Experience with SailPoint IdentityIQ, SAP GRC, and ServiceNow.
• Knowledge of SAML, OAuth, OIDC, SCIM is preferred.
• Experience with HR data sources like SAP SuccessFactors is desirable.

Responsibilities

• Execute end-to-end Joiner, Mover, and Leaver (JML) processes.
• Provision identities across Entra ID, Active Directory, Ping Identity, PingFederate, PingOne, and integrated apps.
• Assign RBAC entitlements and ensure least privilege and SoD compliance.
• Process role changes using HR data from SAP SuccessFactors and resolve SoD conflicts.
• Perform entitlement analysis with SailPoint IdentityIQ and SAP GRC.
• Support role catalog maintenance and entitlement remediation.
• Coordinate access certification campaigns and track progress.
• Record activities in ServiceNow for audit traceability.
• Monitor IAM SLAs and produce governance metrics.

Skills

IAM Operations

JML processes

RBAC & SoD

SailPoint IdentityIQ

ServiceNow

Microsoft Entra ID

Tools

SailPoint IdentityIQ

SAP GRC

ServiceNow

Microsoft Entra ID

Active Directory

PingFederate

PingOne

Ping Identity

Job description

Cognizant Technology Solutions Corporation, Oakville, Canada, seeks an experienced IAM Operations Engineer to manage the identity lifecycle, JML, and access governance across Microsoft Entra ID, Active Directory, Ping Identity, and other enterprise platforms. The ideal candidate will leverage SailPoint IdentityIQ and SAP GRC for entitlement analysis and maintain audit-ready documentation.

Responsibilities include provisioning, role-based access control, certification campaigns, and