Test Lead - IAM (Identity and Access Management

In this role, you will be responsible for ensuring the quality, security, and compliance of Identity and Access Management (IAM) solutions across enterprise applications and platforms. The ideal candidate has strong expertise in IAM application testing, security testing, and test automation, with a deep understanding of IAM platforms, authorization models, security protocols and security frameworks. You will play a pivotal role in designing, executing, and automating comprehensive test strategies to validate complex authentication and authorization workflows.

• Lead the Quality Engineering (QE) efforts for IAM-related initiatives, ensuring comprehensive test coverage for authentication and authorization workflows.
• Validate IAM capabilities, including SSO, MFA, Federation (SAML, OIDC, OAuth 2.0), Identity Lifecycle Management, and Access Governance.
• Perform API, integration, regression, and end-to-end testing across IAM systems and security applications
• Design, develop, and maintain automated test scripts using Java and Selenium to streamline regression testing to ensure comprehensive test coverage.
• Execute rigorous control testing to verify provisioning, deprovisioning, role management, entitlement management, access reviews, and certification processes according to security requirements and audit standards.
• Collaborate with developers, security architects, and business stakeholders to support compliance requirements, ensure high-quality deliverables, and drive successful UAT execution.
• Participate in the full software development lifecycle (SDLC), contributing to the continuous improvement of testing processes and quality standards.

• 10+ years of professional experience in Quality Engineering, with a specific focus on IAM systems.
• Deep understanding of Authentication, Authorization, RBAC/ABAC models, and user lifecycle management.
• Prior experience with leading IAM platforms (e.g., SailPoint, Ping Identity, Okta, Cyber Ark, Forge Rock, Microsoft Entra ).
• Proficiency in validating identity services through API testing (REST/SOAP) and querying backend databases or LDAP directories.
• Strong technical ability to design and maintain robust test automation frameworks using Java and Selenium.
• Good experience with API testing and validation using tools such as Postman, REST Assured, or Swagger
• Strong knowledge of authentication, federation, and access management concepts, including SSO, MFA, access governance, and privileged access management
• Familiarity with CI/CD integration, version control (Git), and additional automation tools to streamline the QE process.

• Banking domain experience.

We regularly assess market data to ensure we offer a competitive compensation package for our associates. The base salary for this position ranges between CAD 90,000 – 110,000 per year. Where the successful candidate may fall within the range depends on relevant education, work and/or management experience and other business-related and job-necessary qualifications. This position is also eligible for Cognizant’s discretionary annual performance-based bonus, as well as benefits that support your physical, mental and financial wellbeing.

We believe hybrid work is the way forward as we strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a hybrid position requiring 4 days a week in a client or Cognizant office in Toronto. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.

Applications for this position are reviewed by our recruitment team without the use of artificial intelligence screening tools.