← All roles
Example listing Identity & Access Management

Senior IAM Engineer — SailPoint

Toronto / Remote CanadaFull-time · Permanent

About the role

The organisation is mid-way through a multi-year identity programme and needs a senior engineer to own SailPoint day to day: application onboarding, lifecycle workflows, access certification campaigns, and the integrations the rest of the stack depends on. You’ll work alongside a small IAM team and report to the Manager, Identity & Access Management.

What you’ll do

  • Own SailPoint IdentityIQ configuration, customisation, and day-to-day operation
  • Onboard applications and build connectors, including Active Directory, Entra ID, and key business systems
  • Design and run access certification campaigns and lifecycle (joiner–mover–leaver) workflows
  • Troubleshoot provisioning issues and work with application owners to resolve them
  • Contribute to the IAM roadmap, standards, and audit evidence for access controls

What you bring

  • 5+ years in IAM, with deep hands-on SailPoint IdentityIQ experience (IIQ 8.x)
  • Working knowledge of Java / BeanShell, Active Directory, and Entra ID
  • Experience with access governance, SoD, and certification campaigns in a regulated environment
  • Clear communication with application owners and auditors — in plain language
  • Based in Canada and eligible to work here; Toronto-area preferred for occasional on-site days

What’s on offer

Base salary of $120,000–$150,000 depending on experience, plus benefits and pension. Remote-first within Canada, with occasional Toronto on-site days. This is a permanent, full-time role.

Questions before you apply? Email hello@403talent.ca or call 403-863-4517 — a person answers, and there’s no obligation either way.