IAM Specialist

Position Description:

Location: Mississauga, Ottawa, Calgary, Toronto or other locations within proximity to a CGI Office
Security Clearance: Must have or eligible to obtain Federal Reliability Security Clearance

The IAM Specialist is responsible for designing, implementing, and maintaining robust security measures to protect cloud-based infrastructure, applications, and data. This role collaborates closely with IT, DevOps, and compliance teams to ensure that cloud environments are secure, compliant, and aligned with industry best practices and regulatory requirements.

Your future duties and responsibilities:

Primary Responsibilities:
· Identity & Access Management (IAM):
· Review, analyze and understand the Microsoft Entra ID hybrid architecture.
· Conduct IAM audits and generate custom reports (log analytics, usage and insights).
· Plan and execute Entra ID Identity Federation (WsFed) cutover from a legacy Sailpoint IIQ platform to Okta.
· Collaboration & Leadership:
· Work closely with internal teams, application owners, and solution architects.

Risk Assessment and Management:

Conduct regular risk assessments and vulnerability analyses to identify potential security threats to cloud environments.
Implement and maintain security controls to mitigate identified risks and vulnerabilities.
Develop and enforce policies and procedures for cloud security risk management.
Security Monitoring and Incident Response:

Monitor cloud environments for security breaches, incidents, and anomalies using security information and event management (SIEM) tools.
Respond to and investigate security incidents, providing timely resolution and mitigation.
Conduct post-incident analysis and develop strategies to prevent future incidents.
Compliance and Governance:

Ensure cloud environments comply with relevant security standards, regulations, and frameworks (e.g., ISO 27001, NIST, GDPR, HIPAA).
Develop and maintain documentation for cloud security policies, procedures, and guidelines.
Coordinate with internal and external auditors during security assessments and audits.
Collaboration and Training:

Collaborate with IT, DevOps, and development teams to integrate security best practices into cloud infrastructure and applications.
Provide training and guidance to employees on cloud security practices and awareness.
Stay current with the latest cloud security trends, threats, and technologies.
Automation and DevSecOps:

Implement security automation tools and scripts to streamline security processes and reduce manual effort.
Integrate security controls into CI/CD pipelines to ensure continuous security throughout the software development lifecycle (SDLC).
Identity and Access Management (IAM):

Manage and configure IAM policies and roles to ensure appropriate access controls are in place.
Monitor and audit user access to cloud resources to detect and respond to unauthorized access attempts.
Encryption and Data Protection:

Implement encryption mechanisms to protect sensitive data in transit and at rest in cloud environments.
Ensure proper key management practices are followed for cloud-based encryption.

Required qualifications to be successful in this role:

Required Skills & Qualifications:

Security Clearance: Must have or eligible to obtain Federal Reliability Security Clearance

· Technical Expertise:
· 3+ years of experience with Entra ID, Active Directory, PowerShell, Microsoft Graph API, Kusto Query Language.
· Strong understanding of Conditional Access Policies, Entra Connect, and Identity Federation
· Experience with automation and scripting
· Certifications:
· Microsoft Azure Administrator (AZ-104) – Preferred.
· Microsoft Identity and Access Administrator (SC-300) – Preferred.
· Microsoft Security Operations Analyst (SC-200) – Optional.
· Soft Skills:
· Strong analytical and problem-solving abilities.
· Excellent communication and documentation skills.
· Ability to work in global, cross-functional teams.
. Bachelors degree in Computer Science, other relevant field and/or equivelent experience

#LI-AB19

Skills:

• English
• Active Directory
• Identity and Access Mgt (IAM)
• PowerShell
• PowerShell

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

At CGI, we value the strength that diversity brings and are committed to fostering a workplace where everyone belongs. We collaborate with our clients to build more inclusive communities and empower all CGI partners to thrive. As an equal-opportunity employer, being able to perform your best during the recruitment process is important to us. If you require an accommodation, please inform your recruiter.

To learn more about accessibility at CGI, contact us via email. Please note that this email is strictly for accessibility requests and cannot be used for application status inquiries.

Come join our team—one of the largest IT and business consulting services firms in the world.