SailPoint Engineer (RBAC focus)

SailPoint Engineer (RBAC focus)
TD Bank
Hybrid 2 days onsite
Toronto ON
$68/hr CAD (Incorp rate)

*BGV must be fully cleared
*Subcontracting permitted by end client
*End client assets required

Job Description/ Responsibilities
Role Engineering: Lead the full lifecycle of RBAC implementation including the design definition and validation of Business Roles IT Roles and Organizational Roles within SailPoint IIQ.
Role Mining & Analysis: Utilize IIQs advanced features including Role Mining and Entitlement Analysis to identify define and consolidate access patterns across the enterprise landscape.
Role Composition: Define the composition of Roles by mapping them to appropriate Access Profiles and Entitlements ensuring accuracy and consistency across target applications.
Stakeholder Collaboration: Work closely with Business Process Owners and Application Owners to gather requirements validate role definitions and ensure the access model accurately reflects current business functions.
Custom Rule Development: Develop test and deploy custom Java and BeanShell rules XML configuration and custom workflows to meet complex RBAC requirements including dynamic role assignment logic.
Application Onboarding: Configure and deploy standard and custom Connectors (e.g. Active Directory LDAP JDBC SAP) to onboard applications accurately aggregating and correlating Identities and Entitlements for use in the role model.
Provisioning: Implement automated Provisioning and De-provisioning logic based on Role assignment changes ensuring that users gain and lose access efficiently as they join move or leave the organization.
Certification (Attestation): Configure and execute various Certification Campaigns (e.g. Manager Role Owner Application Owner) based on the deployed Role Model to simplify and enforce periodic access reviews.
Separation of Duties (SoD): Design configure and manage SoD Policies within IIQ ensuring that conflicting role combinations are identified and flagged for review and developing appropriate preventative controls.
Reporting: Develop custom reports and dashboards to monitor Role Adoption track Provisioning Success Rates and demonstrate RBAC compliance for internal and external audits.
Required Skills:
6 Years of hands-on development and implementation experience with SailPoint IdentityIQ
Deep expertise in Role-Based Access Control (RBAC) principles and the ability to apply them to an enterprise environment
Proficiency in Java and BeanShell scripting for writing custom rules policies and workflows within the SailPoint framework
Strong understanding of Identity Governance and Administration (IGA) concepts including lifecycle management (Joiner Mover Leaver)

What are the top 3 skills required for this role
SailPoint RBAC