Purpose: The Identity & Access Management Designer is a technology and solution subject matter expert with deep pragmatic experience and passion for the Identity and Access domain as well as other relevant information security domains.

Reporting to the Senior Manager, Identity and Access Management, this role serves as an expert technical resource for the planning, design, configuration, integration, testing and ongoing evolution of IAM solutions and services.

The role provides guidance on IAM standards, solution design, workflows, controls, technical patterns and best practices to support secure, scalable and sustainable identity services, improving the user experience, and supporting the long-term evolution of IAM services at the University.

The IAM Designer collaborates closely with both technical and non-technical partners across the University to effectively translate the IAM objectives into specific identity and access management workflows enabled by York University's IAM technologies and services.

Education: Experience: 7 years related experience with the development, implementation, and operation of identity management systems and related technologies.

Extensive experience designing, implementing, maintaining, administering and troubleshooting Sail

Point IdentityIQ solutions, including complex workflows, integrations and identity lifecycle processes.

Experience integrating Sail

Point with directories, applications, and cloud platforms using REST/SOAP APIs.

Experience with enterprise identity platforms such as Microsoft Entra ID (Azure AD), including authentication, authorization, and identity governance capabilities.

Experience scripting using Beanshell, Java, SQL, XML, JSON.

Experience with Linux/UNIX systems and LDAP directories.

Experience with user provisioning, de-provisioning, and access certification workflows.

Skills: Effective communication skills.

Ability to present complex technical materials to non-technical business partners and executives.





Ability to work closely with business and IT teams to align IAM strategies with organizational goals.

Ability to work with operating systems and middleware security software/tools.

Ability to solve large complex IT and business problems that are often ambiguous, conceptual and/or ill-defined.

Effective project coordination skills.

Ability to apply judgment, discretion, technical problem-solving, and analytical skills.

Ability to work as a team member and establish effective working relationships.

Ability to build relationships and bring together individuals with different perspectives and opinions toward a common goal.

Commitment to continuous learning and skill building in DEDI and cultural competence.

Effective interpersonal skills, including listening and questioning skills.

Ability to maintain strict confidentiality.

Ability to accomplish goals through influence without direct authority.

Ability to navigate and work effectively in a agile work environment with frequent change.

Ability to interpret regulatory standards and technical specifications.

Ability to design scalable and secure IAM frameworks, procedures, and best practices.

Expertise in implementing and managing role-based and attribute-based access models.

Proficiency in Java, XML, SQL, JSON and Beanshell, for custom connector deployments.

Effective knowledge of IAM principles, practices, and standards as applicable in a multi-faceted organization supported by multi-platform technical environments.

Deep understanding of IAM architecture, lifecycle events, workflows, and connectors.

Familiarity with NIST, CIS, and industry IAM frameworks.

Knowledge of identity threats, zero-trust models, and IAM risk mitigation strategies.

Awareness of IT infrastructure, cloud security, and hybrid IAM deployment models.

Knowledge of relational databases (SQL) and directory services (Active Directory, LDAP) in IAM implementations.

Effective knowledge of Active Directory, LDAP, SSO, MFA, and authentication protocols (SAML, OAuth, OpenID Connect).

Knowledge of managing CI/CD pipelines and automating tasks using tools such as Ansible

📌 Identity and Access Management Designer (Ontario)
🏢 York University
📍 Ontario