The Lead IAM Quality Assurance Engineer is responsible for ensuring the quality, security, and compliance of Identity and Access Management (IAM) solutions across enterprise applications and platforms. This role partners with IAM architects, security engineers, product owners, and application teams to validate authentication, authorization, and access governance capabilities. The ideal candidate has strong expertise in IAM technologies, security testing, and test automation, with a deep understanding of RBAC, ABAC, and PBAC models. This position plays a key role in ensuring that IAM solutions meet business, regulatory, and security requirements while delivering a seamless user experience.
Req#1060218352
The recruiting efforts for this position are intended to fill an existing vacancy for a new position.
Responsibilities
-
Lead end-to-end QA strategy, planning, and execution for IAM platforms and security solutions
-
Design, develop, and maintain test plans, test cases, and automation frameworks to ensure comprehensive test coverage
-
Validate IAM capabilities, including SSO, MFA, Federation (SAML, OIDC, OAuth 2.0), Identity Lifecycle Management, and Access Governance
-
Test and verify authorization models (RBAC, ABAC, PBAC) and validate PDP/PEP integrations and policy enforcement
-
Perform API, integration, regression, and end-to-end testing across IAM systems and security applications
-
Verify provisioning, deprovisioning, role management, entitlement management, access reviews, and certification processes while managing defects through resolution and root cause analysis
-
Collaborate with business, security, architecture, and engineering teams to support compliance requirements, ensure high-quality deliverables, and drive successful UAT execution
Requirements
-
6+ years of QA/QE experience, including 3+ years supporting Identity & Access Management (IAM), cybersecurity, or identity governance initiatives
-
Hands-on experience with IAM platforms such as Ping Identity, ForgeRock, Okta, SailPoint, Saviynt, CyberArk, or Microsoft Entra ID
-
Strong knowledge of authentication, federation, and access management concepts, including SSO, MFA, access governance, and privileged access management
-
Proven experience validating authorization models and access control workflows, including RBAC, ABAC, and PBAC
-
Solid understanding of identity and security protocols such as SAML, OAuth 2.0, OIDC, LDAP, and SCIM
-
Familiarity with API testing and validation using tools such as Postman, REST Assured, or Swagger
-
Knowledge of policy-based authorization technologies, including OPA, Cedar, or XACML
-
Exposure to Zero Trust security frameworks and modern access management practices
-
Experience working within CI/CD pipelines and DevSecOps environments
-
Strong analytical, troubleshooting, communication, and stakeholder management skills
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our clients, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
Engineer the Future with a Career at EPAM
EPAM Canada welcomes and encourages applications from candidates with disabilities. Please contact WFA Human Resource CA [email protected] if you have questions in this regard, or if you require an accommodation to complete the application process. Click here to review EPAM’s Accessibility for Ontarians with Disabilities Accessibility Policies and Multi-Year Access.
An artificial intelligence system is software that is developed with one or more techniques that can, for a given set of human-defined objectives, using algorithmic information processing, generate outputs such as content, predictions, recommendations, or decisions with varying levels of autonomy (“AI”). Tasks that humans have traditionally done by thinking and reasoning are increasingly being done by, or with the help of, AI to help create efficiencies.EPAM may use AI during the recruitment process, in connection with collecting or processing your personal data. Some (non-exhaustive) examples of tasks that EPAM may use AI for include conducting initial screening, creating transcripts of interviews, and assessing applications/CVs against defined job description criteria to make suggestions to the individuals evaluating your candidacy.Your personal data and the results of any processing are not shared with AI applications outside of EPAM infrastructure. While EPAM may use AI to help create efficiencies during the recruitment process, EPAM does not use AI to make hiring decisions, which is done by EPAM Talent Acquisition and management.
