Practice - CIS - Cloud, Infrastructure, and Security ServicesAbout Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure setting.Job SummaryThis role is responsible for managing and optimizing our cloud security tooling and ensuring robust cloud security operations across IaaS, PaaS, and SaaS environments. The role will involve triaging and managing cloud security issues alongside providing expert consultancy to the business on cloud security risks and driving remediation efforts. Additionally, this role involves developing automation scripts, generating actionable security reports, and enabling data-driven insights through analytics and BI tools.*Please note, this role is not able to offer visa transfer or sponsorship now or in the future*In this role, you will:Role Engineering: Lead the full lifecycle of RBAC implementation, including the design, definition, and validation of Business Roles, IT Roles, and Organizational Roles within SailPoint IIQ.Role Mining & Analysis: Utilize IIQ's advanced features, including Role Mining and Entitlement Analysis, to identify, define, and consolidate access patterns across the enterprise landscape.Role Composition:



Define the composition of Roles by mapping them to appropriate Access Profiles and Entitlements, ensuring accuracy and consistency across target applications.Stakeholder Collaboration: Work closely with Business Process Owners and Application Owners to gather requirements, validate role definitions, and ensure the access model accurately reflects current business functions.Custom Rule Development: Develop, test, and deploy custom Java and BeanShell rules, XML configuration, and custom workflows to meet complex RBAC requirements, including dynamic role assignment logic.Application Onboarding: Configure and deploy standard and custom Connectors (e.G., Active Directory, LDAP, JDBC, SAP) to onboard applications, accurately aggregating and correlating Identities and Entitlements for use in the role model.Provisioning: Implement automated Provisioning and De-provisioning logic based on Role assignment changes, ensuring that users gain and lose access efficiently as they join, move, or leave the organization.Certification (Attestation): Configure and execute various Certification Campaigns (e.G., Manager, Role Owner, Application Owner) based on the deployed Role Model to simplify and enforce periodic access reviews.Separation of Duties (SoD): Design, configure,



and manage SoD Policies within IIQ, ensuring that conflicting role combinations are identified and flagged for review, and developing appropriate preventative controls.Reporting: Develop custom reports and dashboards to monitor Role Adoption, track Provisioning Success Rates, and demonstrate RBAC compliance for internal and external audits.What you need to have to be considered6+ Years of hands‑on development and implementation experience with SailPoint IdentityIQDeep expertise in Role-Based Access Control (RBAC) principles and the ability to apply them to an enterprise environmentProficiency in Java and BeanShell scripting for writing custom rules, policies, and workflows within the SailPoint frameworkStrong understanding of Identity Governance and Administration (IGA) concepts, including lifecycle management (Joiner, Mover, Leaver)Applications will be accepted until 13 Mar 2026.Salary and Other Compensation:The annual salary for this position is between $[124,000 - 143,000] depending on experience and other qualifications of the successful candidate.This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:Medical/Dental/Vision/Life InsurancePaid holidays plus Paid Time Off401(k) plan and contributionsLong-term/Short-term DisabilityPaid Parental LeaveEmployee Stock Purchase Plan#J-18808-Ljbffr

📌 Sailpoint Engineer - $124,000 - $143,000 A Year (Toronto)
🏢 Cognizant
📍 Toronto