IAM Engineer — Identity Governance & Cloud IAM Calgary, Alberta, Canada · Permanent Resident · No sponsorship required
IAM Engineer with 4+ years of experience in software development and identity governance, including a hands-on SailPoint IdentityIQ implementation at BNP Paribas — one of Europe's largest regulated banking environments.
Currently based in Calgary, transitioning to Cloud IAM with a focus on SailPoint ISC and Microsoft Entra ID (SC-300 in progress).
IAM Engineer — Synetis (Client: BNP Paribas) · Paris · 2023–2024
Identity governance implementation in a complex, multi-system banking environment:
- Joiner / Mover / Leaver workflows including Leave of Absence and ComeBack scenarios
- BeanShell rules and aggregation logic for identity data processing
- CSV onboarding and identity model configuration
- Access certification campaigns (mover scenarios, least-privilege enforcement)
- UAT support — debugging identity workflows and resolving production issues
- Technical documentation (admin guides, spec updates)
Banking-style identity governance lab with separate DEV and TEST environments (VirtualBox), simulating real enterprise project conditions based on BNP Paribas experience.
| Scenario | Status |
|---|---|
| CSV onboarding (9 attributes) | ⬜ Planned |
| Joiner — create & provision | ⬜ Planned |
| Leaver — revoke & deactivate | ⬜ Planned |
| Mover — department change | ⬜ Planned |
| Leave of Absence — suspend access | ⬜ Planned |
| ComeBack — restore access | ⬜ Planned |
| BeanShell aggregation rule | ⬜ Planned |
| Access certification campaign | ⬜ Planned |
| UAT bug scenario + fix log | ⬜ Planned |
This lab reflects real-world IAM practices: DEV/TEST environments, lifecycle automation, and UAT validation in a banking context.
📁 /iiq-lab
Authentication flow simulation using Okta as Identity Provider.
| Task | Status |
|---|---|
| OIDC application configuration | ⬜ Planned |
| MFA implementation (Okta Verify) | ⬜ Planned |
| End-to-end authentication flow test | ⬜ Planned |
| OAuth2 vs OIDC documentation | ⬜ Planned |
| Certification | Provider | Status |
|---|---|---|
| Identity Security Cloud (ISC) Foundations | SailPoint | 🔄 In progress |
| SC-300 — Identity & Access Administrator | Microsoft | 🔄 In progress |
IAM / IGA: SailPoint IdentityIQ · Identity Lifecycle (JML) · Access Certification · BeanShell
Cloud IAM: Microsoft Entra ID · SailPoint ISC · Okta
Auth protocols: SSO · SAML · OAuth2 · OpenID Connect · MFA
Development: Java · Spring Boot · REST APIs · SQL / PL-SQL
Tools: Git · Docker · Postman · Apache Tomcat · IntelliJ · VS Code