IGA Senior Engineer (Identity Governance & Administration)

IGA Senior Engineer (Identity Governance & Administration)

Aviva

The Identity and Access Management (IAM) team is looking for someone with experience in architecting and engineering Identity Governance and Administration (IGA) security solutions and driving the implementation of these solutions in the IAM space. The ideal candidate will possess a broad knowledge and strong technical hands-on experience with IAM solutions, focusing on IGA but also including Customer Identity and Access Management (CIAM) as well as Privileged Access Management (PAM) solutions.

What you'll do:

In this role, you will be responsible for architecting, engineering, implementing, and enhancing the new IGA solution, including its integration with CIAM, PAM tools, Active Directory (AD), LDAP directories, and business systems.

Additionally, you will work with the Access Management team to review, document, update, and align Aviva access provisioning processes with industry best practices in preparation for the implementation of the IGA solution.

What you'll bring:

1. Bachelor's degree in Computer Science or Computer Engineering, or equivalent experience.
2. At least 8 years of Information Security experience with a focus on IGA projects.
3. Hands-on experience in engineering, implementation, application onboarding, and support in one or more of the following IGA tools: SailPoint IdentityNOW (required); SailPoint IIQ, Saviynt, Forgerock, OKTA (nice to have).
4. Proven integration experience of IGA tools with Workday, AD, AzureAD / EntraID, LDAP, CIAM (OKTA CIC Auth0), and PAM (CyberArk, BeyondTrust) in both Cloud and on-prem environments.
5. Familiarity with SailPoint IdentityNOW Non-Employee Risk Management (NERM) is a plus.
6. Experience in designing, updating, and implementing industry best practices for Joiner/Mover/Leaver (JML) processes and user lifecycle management (LCM) within IGA tools.
7. Deep understanding of IAM technologies, controls, and standard methodologies (LDAP, user directories, certificates, SAML/OAUTH, MFA, SSO, etc.).
8. Experience in the implementation and support of SaaS CIAM solutions (OKTA CIC Auth0, Forgerock, PingIdentity).
9. Experience in the implementation and support of SaaS and on-prem PAM solutions (Beyond Trust and CyberArk).
10. Solid grasp of Active Directory structure including Organizational Units (OUs), Groups, Access Rights, and GPO policies.
11. Strong technical ability to design, build, and support a dedicated DEV environment for IGA related solutions.
12. Experience in scripting automation and integration work using Unix scripting, PowerShell, Java, Python, and Ansible Tower.
13. Experience working with multiple database types (MS SQL, DB2, Oracle, MongoDB, etc.).
14. Ability to effectively employ critical thinking and analysis to determine project scope and timelines.
15. Able to multi-task on multiple projects and tasks in a fast-paced environment.
16. Strong verbal and written communication, interpersonal, and collaborative skills.
17. A curiosity about digital/cybersecurity and a desire to upskill as necessary.

What you’ll get:

Compelling rewards package including base compensation, eligibility for an annual bonus, retirement savings, health benefits, and volunteer opportunities.

Competitive vacation package with the option to purchase 5 extra days off per year.

Employee-driven programs focused on diversity and inclusion.

Corporate wellness programs to support employees’ physical and mental health.

Hybrid flexible work model.

Please note that we may use AI tools to assist in the recruitment process. This position has been posted both internally & externally.

Aviva Canada has an accommodation process in place for employees with disabilities. If you require a specific accommodation due to a disability, please contact your Talent Acquisition Partner.