Senior Manager, Identity and Access Management (Cyber Information Security)

IAM Senior Manager

Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

About the Position

The Identity and access Management (IAM) team is looking for someone with extensive experience in leading Identity Governance and Administration (IGA), Customer Identity and Access Management (CIAM) and Privileged Access Management (PAM) technical teams, which design and run enterprise IAM program. You will be responsible for architectural delivery and operations support in the IAM Domain Cyber Security Services, both directly and working through group of senior solution engineers and technical support specialists that you will manage. You will play a critical role in defining the end-to-end architectures and designs for workforce (IGA), customer (CIAM) and PAM solutions within multi-cloud and on-prem environments and driving Aviva Canada incrementally towards automated and optimized IAM target state architecture. This is a deep technical, delivery and leadership-oriented role that provides a unique opportunity to work closely with numerous business and functional areas across global Aviva organization.

What you’ll do
 

The Senior Manager – IAM is a technical leader responsible for selecting and implementing ground-breaking capabilities for Aviva Canada IAM program. In this role, you will engage with many teams across Aviva Canada and beyond to implement a best-in-class IAM solutions that secure, improve, and enrich Aviva Canada customer experience and digital assets. The Senior Manager, IAM main responsibility is engineering, management, and operation of Aviva Canada IAM processes and tools.

The successful candidate will:

• Manage a team of IAM senior engineers and technical support specialists that contribute to and implement the Aviva Canada IAM vision and roadmap, including IGA, CIAM and PAM solutions.
• define solutions realizing IGA, CIAM and PAM capabilities, develop and evolve solution architectures and designs, demonstrate solutions meet stakeholders’ requirements, and obtain approval on your architectures and designs at the architecture review board.
• propose, evaluate, and recommend solution alternatives that best meet business strategy requirements, current state environment constraints and alignment to target state architecture.
• deliver architectures and designs in both agile and iterative waterfall project delivery methodologies and propose and implement improvements to advance the viability of the solutions to meet program timelines, budget, and quality measurements.
• support the development of comprehensive IAM strategy roadmaps, providing input to ensure project investments are moving Aviva Canada towards the target state architecture, and representing the architecture renewal and maintenance perspective.
• author patterns to drive reuse of IAM solutions across Aviva organization.
• drive the technical evaluation of third-party technologies and products.
• be an authoritative and trusted partner with deep, practical experience in IGA, CIAM and PAM solution architecture and design best practices to various business and functional areas across Aviva, as well as to various management, risk, and governance functions.
• liaise with cloud, integration, data, application, infrastructure architecture and development/engineering teams to ensure that all solution architecture views are defined and elaborated, and that solutions are implemented as designed.
• ensure IAM solutions are meeting security and business objectives and outcomes by establishing metrics that lead to actions for improvement.
• continuously improve and innovate Aviva Canada IAM capabilities to drive value, enhance customer experience and secure digital assets.

What you’ll bring

• Bachelor’s degree in computer science or computer engineering, or equivalent experience
• Minimum of 5 years leadership experience leading and coaching technical teams/people to their highest potential.
• Minimum of 8 years’ experience in implementing IAM technologies, processes, and capabilities.
• 3-5 years of hands-on experience in implementation, and support in one or more of the following IAM tools: OKTA Customer Identity Cloud (WIC / Auth0), Sailpoint IdentityNOW, BeyondTrust, CyberArk is a must. OKTA Workforce Identity Cloud (WIC), Sailpoint IdentityIQ are nice to have.
• Experience in integrating CIAM, IGA and PAM tools (e.g., OKTA CIC, Sailpoint IdentityNOW, BeyondTrust) is required.
• Deep understanding of CIAM technologies, controls, and standard methodologies (user directories (e.g., Microsoft AD, LDAP), digital certificates, SAML/OIDC/OAUTH, Header based auth, MFA, SSO, Adaptive Authentication, FIDO, WebAuthN, PKI, Passwordless).
• Extensive knowledge and application of IAM capabilities: authentication, authorization, attribute / policy / role-based access control management (ABAC, PBAC and RBAC), access certifications, PAM secrets management, etc.; hands-on experience with designing solutions with these capabilities and the use of these solutions across IGA, CIAM and PAM user populations.
• Working knowledge of fraud detection, identity proofing, and identity verification technologies.
• Working knowledge of CIAM, IGA, PAM principles in cloud first environment.
• Working knowledge of cloud providers such as Amazon Web Services (AWS), Microsoft Azure/Entra and Google Cloud Platform (GCP).
• Strong verbal and written communication, interpersonal and collaborative skills – interacting with both internal and external clients and vendors from both technical and non-technical perspectives.
• Extensive experience in applying IT risk management practices to assess, measure and reduce risk related to the IAM domain.
• Know how to influence technology teams to deliver streamlined customer identity experience.
• Experience influencing teams and partners without direct authority over them.
• Proven experience in writing technical documentation.

What will you get for this role?

• Join a great company and culture, and a phenomenal team!
• Competitive rewards package.
• Comprehensive benefits package, including Medical/Dental, personal wellness, defined contribution pension plan, share matching plan.
• Annual performance related bonus and pay review.
• Exceptional career development opportunities.
• Vacation allowance of 20 days plus statutory holidays, personal floater day, the option to buy/sell up to 5 additional vacation days and time off for volunteer opportunities.
• Discounts on many Aviva products through the Employee Purchase Program plus discounts for Friends and Family (some exclusions apply).
• We will support your professional development.

Additional information

Aviva Canada has an accommodation process in place to provide accommodations for employees with disabilities. If upon commencement of employment you require a specific accommodation because of a disability, please contact your Talent Acquisition Partner so that an appropriate accommodation can be arranged. This process applies throughout your career with Aviva Canada.