Senior Associate - Identity and Access Management

RSM Canada; Toronto; Hybrid; CAD 62,000 - 108,000; Full time

Job summary

RSM Canada LLP is seeking an experienced SailPoint IAM consultant to design, implement, and support IdentityIQ/Identity Security Cloud solutions for middle-market clients in Canada. The role covers lifecycle management, connectors, and RBAC governance within a collaborative consulting environment.

You will work with Active Directory, Entra ID, REST APIs, and HR systems to translate business needs into scalable IAM solutions, delivering high-quality documentation and stakeholder communication.

Qualifications

• Hands-on experience implementing, configuring, developing, or supporting SailPoint IdentityIQ and/or SailPoint Identity Security Cloud (ISC).
• Experience with identity lifecycle management processes: provisioning, deprovisioning, access certifications.
• Experience configuring and troubleshooting integrations between SailPoint and enterprise applications or identity repositories.
• Strong understanding of IAM concepts, RBAC, least privilege, access governance, authentication, authorization, and identity lifecycle management.
• Experience with technologies such as Active Directory, Microsoft Entra ID, LDAP, REST APIs, SQL/databases, and cloud platforms.
• Development or scripting experience with Java, BeanShell, PowerShell, Python, JavaScript, XML, JSON, or REST APIs.
• Experience troubleshooting complex IAM and SailPoint issues involving workflows, provisioning, connectors, aggregations, identities, and access.
• Strong analytical and problem-solving skills; ability to translate business/security requirements into technical solutions.
• Excellent written and verbal communication; able to explain technical concepts to diverse stakeholders.
• Ability to work in a client-facing consulting environment.
• High integrity and confidentiality with sensitive identity data.

Responsibilities

• Design, configure, implement, and support SailPoint IdentityIQ and/or Identity Security Cloud to meet client requirements.
• Develop and maintain identity lifecycle management processes (joiner, mover, leaver, access requests, provisioning, deprovisioning, certifications).
• Configure and support SailPoint connectors and integrations with enterprise applications, directories, databases, cloud platforms, and other technologies.
• Develop and customize SailPoint workflows, rules, policies, forms, reports, and components.
• Integrate SailPoint with AD, Entra ID, REST APIs, databases, HR systems, and enterprise apps.
• Collaborate with clients and internal stakeholders to translate requirements into technical solutions.
• Troubleshoot identity governance, provisioning, connectors, aggregations, and access issues.
• Assist with RBAC, SoD, and identity governance standards development and implementation.
• Develop technical documentation and operational procedures for solutions.
• Identify opportunities to improve governance processes, automation, and platform performance.
• Communicate issues and recommendations to technical and non-technical stakeholders.
• Stay current on SailPoint capabilities and IAM trends.
• Support cross-functional teams and client environments to deliver IAM solutions.
• Provide guidance to junior team members.

Skills

SailPoint IdentityIQ/Identity Security

IAM concepts

RBAC / least privilege

Active Directory

Microsoft Entra ID

REST APIs

Java / PowerShell / Python

LDAP / SQL databases

SailPoint integrations

Troubleshooting IAM

Education

BS in Computer Science / Information Systems / Cybersecurity or related

Tools

Java

PowerShell

Python

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

Responsibilities

• Design, configure, implement, and support SailPoint IdentityIQ and/or Identity Security Cloud (ISC) solutions to meet client identity governance and access management requirements.
• Develop and maintain identity lifecycle management processes, including joiner, mover, and leaver workflows, access requests, provisioning, deprovisioning, and access certifications.
• Configure and support SailPoint connectors and integrations with enterprise applications, directories, databases, cloud platforms, and other identity and security technologies.
• Develop and customize SailPoint workflows, rules, policies, forms, reports, and other platform components to support business and technical requirements.
• Integrate SailPoint with technologies such as Active Directory, Microsoft Entra ID, REST APIs, databases, HR systems, and enterprise applications.
• Collaborate with clients and internal stakeholders to gather requirements, translate business needs into technical solutions, and support SailPoint implementation and enhancement initiatives.
• Troubleshoot identity governance, provisioning, connector, aggregation, certification, and access-related issues across integrated systems.
• Assist with the development and implementation of role-based access control (RBAC), access policies, segregation of duties (SoD), and identity governance standards.
• Develop technical documentation, solution designs, configuration documentation, and operational procedures for implemented solutions.
• Identify opportunities to improve identity governance processes, automation, platform performance, and the overall user experience.
• Clearly communicate technical issues, recommendations, and solutions to both technical and non-technical stakeholders.
• Stay current on SailPoint capabilities, identity security trends, IAM technologies, and industry best practices.
• Work effectively within cross-functional teams and client environments to deliver successful identity and access management solutions.
• Provide technical guidance and support to junior team members and other resources working on assigned engagements.

Required Qualifications

• Hands-on experience implementing, configuring, developing, or supporting SailPoint IdentityIQ and/or SailPoint Identity Security Cloud (ISC).
• Experience with identity lifecycle management processes, including user provisioning, deprovisioning, access requests, access certifications, and account aggregation.
• Experience configuring and troubleshooting integrations between SailPoint and enterprise applications or identity repositories.
• Strong understanding of IAM concepts, RBAC, least privilege, access governance, authentication, authorization, and identity lifecycle management.
• Experience working with technologies such as Active Directory, Microsoft Entra ID, LDAP, REST APIs, SQL/databases, and cloud platforms.
• Development or scripting experience with relevant technologies such as Java, BeanShell, PowerShell, Python, JavaScript, XML, JSON, or REST APIs.
• Experience troubleshooting complex IAM and SailPoint issues involving workflows, provisioning, connectors, aggregations, identities, and access.
• Strong analytical and problem-solving skills with the ability to translate business and security requirements into technical solutions.
• Excellent written and verbal communication skills, including the ability to explain technical concepts to both technical and non-technical stakeholders.
• Ability to work effectively in a client-facing, collaborative consulting environment.
• Must possess a high degree of integrity and confidentiality and demonstrate sound judgment when working with sensitive identity and access information.

Preferred Qualifications

• BS in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field, or equivalent professional experience.
• 3+ years of experience in Identity and Access Management (IAM), Identity Governance and Administration (IGA), or related security engineering roles.
• Relevant SailPoint certifications, such as SailPoint Certified IdentityIQ Engineer, SailPoint Certified Identity Security Engineer, or other applicable SailPoint credentials.
• Experience with SailPoint IdentityIQ customization and development, including workflows, rules, connectors, forms, and lifecycle events.
• Experience with SailPoint Identity Security Cloud, including configuration and integration within cloud-based enterprise environments.
• Experience integrating identity governance solutions with Microsoft Entra ID, Active Directory, ServiceNow, HR systems, cloud platforms, and privileged access management solutions.
• Understanding of identity security frameworks, regulatory requirements, and access-control concepts such as least privilege, segregation of duties, privileged access, and zero trust.
• Experience working in a consulting or professional services environment supporting multiple client engagements.

At RSM, we offer a competitive benefits and compensation package for all our people. Learn more about our total rewards at https://rsmcanada.com/careers/life-at-rsm/rewards-and-benefits.html.

We believe flexibility and in-person connection both play an important role in how we work and grow. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship-building. Some roles may be virtual or primarily on-site based on role requirements, team priorities and client needs.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Canadian uniformed service; Canadian Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [e-mail].

At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $62,000 - $107,500

Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.