About the role

IAM Engineer managing Identity Lifecycle & Permissions service at Finning. Overseeing JML automation, governance and compliance within a global IAM team.

Responsibilities

Deliver and maintain JML workflows and connectors for AD, Entra ID, Okta, and other applications.
Enforce account hygiene by closing dormant/inactive/orphaned accounts across all identity platforms, and work with the support teams to close process gaps.
Manage certification campaigns and revocations for audit compliance.
Clean up and maintain group hygiene, including security groups and distribution groups (with clear ownership boundaries).
Monitor service health and publish reports.
Enhance automation for lifecycle processes and provisioning.
Implement and optimize SoD controls, including exception handling.
Collaborate with the extended IAM team on integration and governance.

8+ years in IAM , with deep experience in IGA and JML automation in large organizations.
Advanced scripting skills (PowerShell preferred; Power Automate, Curl, Perl, Ruby, Java BeanShell are assets).
Proven ability to manage certification processes, SoD rulesets, and account hygiene at scale.
Comfortable working with compliance frameworks, internal/external audit teams, and leading the IAM audit processes and walkthroughs.

Great people and place to work with a hybrid work opportunity
Career advancement and training opportunities
Pension and employee stock purchase plans with company contributions
Extensive health benefits including group medical and dental benefits, and short-term and long-term disability benefits