Senior Analyst, Identity Governance & Priviliged Access Management

The role

This person will lead identity governance and privileged access management initiatives. They will implement and operate the Saviynt Identity Cloud platform and CyberArk PAM capabilities.

What you will do

• Lead implementation, administration, and improvement of Saviynt Identity Cloud platform
• Design and maintain RBAC and ABAC access control models
• Develop automated Joiner, Mover, and Leaver workflows
• Transition manual User Access Review to automated processes
• Coordinate access reviews and entitlement certifications
• Build and optimize access request workflows
• Identify and support remediation of excessive privileges and SoD conflicts
• Integrate IGA platform with HR systems, directories, and cloud platforms
• Administer and expand CyberArk/Idira Privileged Access Management capabilities
• Develop metrics, dashboards, and reports for identity governance

Required qualifications

• Five or more years of relevant experience in Identity and Governance Administration, cybersecurity, or information security
• Hands-on experience implementing or administering an IGA platform
• Experience designing and automating Joiner, Mover, and Leaver processes
• Experience managing User Access Review and certification campaigns in a production environment
• Strong understanding of Identity Governance and Administration, Privileged Access Management, RBAC, ABAC, Segregation of Duties, least privilege, and Zero Trust principles
• Experience with user provisioning and deprovisioning, entitlement management, access requests, access certifications, role engineering, and application onboarding
• Experience administering or supporting CyberArk PAM
• Experience integrating IGA platforms with HR systems, directories such as Microsoft Entra ID, Active Directory, and LDAP, and cloud and SaaS applications
• Experience with identity technologies such as Saviynt, CyberArk, Microsoft Entra ID, Active Directory, AWS IAM, SSO, and MFA
• Working knowledge of REST and SOAP APIs
• Experience using scripting or automation tools
• Familiarity with security and compliance frameworks including NIST, ISO 27001, CIS Controls, SOC 1, and Zero Trust architectures

Nice to have

• PowerShell experience
• Relevant Saviynt, CyberArk, Microsoft, cloud, or identity security certifications

Benefits

• Social events
• Volunteering
• Flexible work practices
• Continuous learning budgets
• Paid study days
• Support for professional designations
• Competitive total compensation
• Retirement savings support
• Wellness credits
• Enhanced parental leave
• Comprehensive health benefits

Before you apply

• AI may be used to support certain stages of our screening & recruitment process

About the company

Connor, Clark & Lunn Financial Group (CCLFG) is one of Canada’s leading asset managers.