Senior Associate - Identity and Access Management

RSM US LLP; Toronto; Hybrid; CAD 62,000 - 108,000; Full time

Job summary

RSM Canada seeks a skilled SailPoint IAM consultant to design, configure, implement, and support SailPoint IdentityIQ and Identity Security Cloud for client identity governance and access management.

You will develop lifecycle workflows, integrate with Active Directory, Entra ID, REST APIs, and databases, and collaborate with clients to translate requirements into technical solutions, delivering robust IAM programs.

Qualifications

• Hands-on experience implementing SailPoint IdentityIQ and/or ISC.
• Experience with identity lifecycle management: provisioning, deprovisioning, access requests, and certifications.
• Experience configuring integrations between SailPoint and enterprise applications or identity repositories.
• Strong understanding of IAM concepts, RBAC, least privilege, access governance, authentication, authorization, and lifecycle management.
• Experience with Active Directory, Microsoft Entra ID, LDAP, REST APIs, SQL/databases, and cloud platforms.
• Development or scripting experience with Java, BeanShell, PowerShell, Python, JavaScript, XML, JSON, or REST APIs.
• Experience troubleshooting complex IAM and SailPoint issues involving workflows, provisioning, connectors, aggregations, identities, and access.
• Strong analytical and problem-solving skills and ability to translate requirements into technical solutions.
• Excellent written and verbal communication; able to explain technical concepts to varied stakeholders.
• Ability to work in a client-facing, collaborative consulting environment.

Responsibilities

• Design, configure, implement, and support SailPoint IdentityIQ and/or ISC solutions to meet client identity governance requirements.
• Develop and maintain identity lifecycle management processes (joiner, mover, leaver workflows, access requests, provisioning, deprovisioning, certifications).
• Configure and support SailPoint connectors and integrations with enterprise applications, directories, databases, cloud platforms, and other IAM technologies.
• Develop and customize SailPoint workflows, rules, policies, forms, reports, and platform components.
• Integrate SailPoint with Active Directory, Entra ID, REST APIs, databases, HR systems, and enterprise apps.
• Collaborate with clients and internal stakeholders to gather requirements and translate them into technical solutions.
• Troubleshoot identity governance, provisioning, connector, aggregation, certification, and access issues across systems.
• Support RBAC, SoD, and identity governance standards development and implementation.
• Develop technical documentation, solution designs, configuration docs, and operational procedures.
• Identify opportunities to improve identity governance processes, automation, and platform performance.
• Communicate technical issues and solutions clearly to technical and non-technical stakeholders.
• Stay current on SailPoint capabilities, IAM trends, and industry best practices.
• Work effectively within cross-functional teams and client environments; provide guidance to junior members.

Skills

SailPoint IdentityIQ

SailPoint Identity Security Cloud

IAM concepts

Active Directory

Microsoft Entra ID

REST APIs

SQL / databases

Java

PowerShell

Python

JavaScript

XML

JSON

Education

BS in Computer Science or related field

3+ years IAM/IGA experience

SailPoint certifications

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

Active Directory

Microsoft Entra ID

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.

Responsibilities

• Design, configure, implement, and support SailPoint IdentityIQ and/or Identity Security Cloud (ISC) solutions to meet client identity governance and access management requirements.
• Develop and maintain identity lifecycle management processes, including joiner, mover, and leaver workflows, access requests, provisioning, deprovisioning, and access certifications.
• Configure and support SailPoint connectors and integrations with enterprise applications, directories, databases, cloud platforms, and other identity and security technologies.
• Develop and customize SailPoint workflows, rules, policies, forms, reports, and other platform components to support business and technical requirements.
• Integrate SailPoint with technologies such as Active Directory, Microsoft Entra ID, REST APIs, databases, HR systems, and enterprise applications.
• Collaborate with clients and internal stakeholders to gather requirements, translate business needs into technical solutions, and support SailPoint implementation and enhancement initiatives.
• Troubleshoot identity governance, provisioning, connector, aggregation, certification, and access‑related issues across integrated systems.
• Assist with the development and implementation of role‑based access control (RBAC), access policies, segregation of duties (SoD), and identity governance standards.
• Develop technical documentation, solution designs, configuration documentation, and operational procedures for implemented solutions.
• Identify opportunities to improve identity governance processes, automation, platform performance, and the overall user experience.
• Clearly communicate technical issues, recommendations, and solutions to both technical and non‑technical stakeholders.
• Stay current on SailPoint capabilities, identity security trends, IAM technologies, and industry best practices.
• Work effectively within cross‑functional teams and client environments to deliver successful identity and access management solutions.
• Provide technical guidance and support to junior team members and other resources working on assigned engagements.

Required Qualifications

• Hands‑on experience implementing, configuring, developing, or supporting SailPoint IdentityIQ and/or SailPoint Identity Security Cloud (ISC).
• Experience with identity lifecycle management processes, including user provisioning, deprovisioning, access requests, access certifications, and account aggregation.
• Experience configuring and troubleshooting integrations between SailPoint and enterprise applications or identity repositories.
• Strong understanding of IAM concepts, RBAC, least privilege, access governance, authentication, authorization, and identity lifecycle management.
• Experience working with technologies such as Active Directory, Microsoft Entra ID, LDAP, REST APIs, SQL/databases, and cloud platforms.
• Development or scripting experience with relevant technologies such as Java, BeanShell, PowerShell, Python, JavaScript, XML, JSON, or REST APIs.
• Experience troubleshooting complex IAM and SailPoint issues involving workflows, provisioning, connectors, aggregations, identities, and access.
• Strong analytical and problem‑solving skills with the ability to translate business and security requirements into technical solutions.
• Excellent written and verbal communication skills, including the ability to explain technical concepts to both technical and non‑technical stakeholders.
• Ability to work effectively in a client‑facing, collaborative consulting environment.
• Must possess a high degree of integrity and confidentiality and demonstrate sound judgment when working with sensitive identity and access information.

Preferred Qualifications

• BS in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field, or equivalent professional experience.
• 3+ years of experience in Identity and Access Management (IAM), Identity Governance and Administration (IGA), or related security engineering roles.
• Relevant SailPoint certifications, such as SailPoint Certified IdentityIQ Engineer, SailPoint Certified Identity Security Engineer, or other applicable SailPoint credentials.
• Experience with SailPoint IdentityIQ customization and development, including workflows, rules, connectors, forms, and lifecycle events.
• Experience with SailPoint Identity Security Cloud, including configuration and integration within cloud‑based enterprise environments.
• Experience integrating identity governance solutions with Microsoft Entra ID, Active Directory, ServiceNow, HR systems, cloud platforms, and privileged access management solutions.
• Understanding of identity security frameworks, regulatory requirements, and access‑control concepts such as least privilege, segregation of duties, privileged access, and zero trust.
• Experience working in a consulting or professional services environment supporting multiple client engagements.

At RSM, we offer a competitive benefits and compensation package for all our people.Learn more about our total rewards at https://rsmcanada.com/careers/life-at-rsm/rewards-and-benefits.html.

We believe flexibility and in‑person connection both play an important role in how we work and grow. Most roles at RSM follow a hybrid workstyle, which means team members are aligned to an RSM office and come together in person when it best supports clients, teams, development or relationship‑building. Some roles may be virtual or primarily on‑site based on role requirements, team priorities and client needs.

RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Canadian uniformed service; Canadian Military/Veteran status; pre‑disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.

Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership.RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at [e-mail].

At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range.

Compensation Range: $62,000 - $107,500

Individualsselected for this role will be eligible for a discretionary bonus based on firm and individual performance.