
IAM Engineer – Identity Lifecycle Management, ILM
Finning
full-time
Posted on:
Location Type: Hybrid
Location: Edmonton • Canada
Visit company websiteExplore more
Salary
💰 CA$110,000 - CA$125,000 per year
About the role
- Deliver and maintain JML workflows and connectors for AD, Entra ID, Okta, and other applications.
- Enforce account hygiene by closing dormant/inactive/orphaned accounts across all identity platforms, and work with the support teams to close process gaps.
- Manage certification campaigns and revocations for audit compliance.
- Clean up and maintain group hygiene, including security groups and distribution groups (with clear ownership boundaries).
- Monitor service health and publish reports.
- Enhance automation for lifecycle processes and provisioning.
- Implement and optimize SoD controls, including exception handling.
- Collaborate with the extended IAM team on integration and governance.
Requirements
- 8+ years in IAM , with deep experience in IGA and JML automation in large organizations.
- Advanced scripting skills (PowerShell preferred; Power Automate, Curl, Perl, Ruby, Java BeanShell are assets).
- Proven ability to manage certification processes, SoD rulesets, and account hygiene at scale.
- Comfortable working with compliance frameworks, internal/external audit teams, and leading the IAM audit processes and walkthroughs.
Benefits
- Great people and place to work with a hybrid work opportunity
- Career advancement and training opportunities
- Pension and employee stock purchase plans with company contributions
- Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
JML workflowsconnectorsaccount hygienecertification campaignsSoD controlsscriptingPowerShellPower AutomateCurlPerl
Soft Skills
collaborationcommunicationleadership