CGI - L2 Identity & Access Management Specialist

Role Overview :

The IAM L2 Specialist is responsible for designing, implementing, and managing enterprise identity and access management solutions. This role ensures secure authentication, authorization, and lifecycle management of user identities across on premises and cloud environments, while enforcing compliance and supporting business agility.

Key Responsibilities :

- Own and manage IAM platforms (Azure AD, Okta, SailPoint, Ping Identity, ForgeRock).

- Define and enforce policies for identity lifecycle management, role?based access control (RBAC), and least?privilege principles.

- Ensure compliance with regulatory frameworks (ISO 27001, NIST, PCI?DSS, GDPR, HIPAA).

Access Control & Security :

- Implement and manage authentication mechanisms (MFA, SSO, passwordless).

- Monitor and audit access rights, ensuring accountability and traceability.

- Manage privileged and non?privileged identities across hybrid environments.

Risk Management & Incident Response :

- Act as escalation point for identity?related incidents and breaches.

- Conduct forensic analysis of suspicious access activity.

- Partner with SOC and threat management teams to mitigate risks.

Integration & Automation :

- Integrate IAM solutions with PAM, SIEM, CMDB, and ITSM platforms.

- Automate onboarding/offboarding processes and role provisioning.

- Develop dashboards and reports for leadership visibility.

Stakeholder Engagement :

- Act as SME for IAM queries across IT and business units.

- Collaborate with infrastructure, application, and security teams to align IAM with enterprise standards.

- Provide training and awareness sessions on identity security and compliance.

Required Skills & Experience :

- 6-8 years of IT/security experience with at least 2-4 years in IAM.

- Hands?on expertise with IAM tools (Azure AD, Okta, SailPoint, Ping Identity).

- Familiarity with ITIL processes and integration with ITSM tools.

- Excellent analytical, communication, and stakeholder management skills.

Preferred Qualifications :

- Vendor certifications in IAM tools (e.g., Okta Certified Professional, SailPoint IdentityNow).

- ITIL v4 certification.

- Experience with cloud IAM solutions and hybrid environments.