Job Summary
The IAM Engineer will be responsible for vulnerability assessment, remediation planning, patching coordination, validation, and compliance reporting for Identity and Access Management (IAM) platforms within Canada Life\'s infrastructure. The role supports a dedicated vulnerability remediation squad focused on reducing security exposure across IAM environments through accelerated patching and remediation activities.
Key Responsibilities
Vulnerability Management & Analysis Analyze vulnerabilities identified through: Cisco Vulnerability Management (Kenna) Rapid7 Wiz OEM/Vendor Security Advisories Security Team Requests Prioritize vulnerabilities based on: Severity (Critical, High, Medium, Low) Risk exposure Aging profile Business impact Map vulnerabilities to IAM assets, systems, and technology owners. IAM Platform Remediation Coordinate and execute remediation activities on IAM platforms including: Access Management solutions Identity Governance platforms MFA solutions Directory Services Authentication infrastructure Privileged Access Management platforms Apply security patches, hotfixes, and firmware updates as applicable. Implement vendor-recommended remediation actions. Perform manual remediation where automated solutions are unavailable. Change & Release Management Prepare implementation plans and change records. Participate in CAB/TAB approval processes. Execute remediation activities during approved maintenance windows. Develop rollback and recovery procedures. Ensure compliance with change management standards. Validation & Closure Validate remediation success against original vulnerability identifiers. Support rescan activities conducted by Canada Life Security teams. Reconcile residual findings and failed remediation attempts. Document exceptions, compensating controls, and risk acceptance recommendations. Governance & Reporting Maintain remediation evidence and audit documentation. Record: Change references Patch execution logs Validation evidence Remediation status Update sprint burn-down reports and remediation trackers. Participate in: Daily execution war-room meetings Weekly governance reviews Sprint closure reviews Collaboration Coordinate with: Security Teams Infrastructure Teams Vulnerability Management Teams Change Management Teams Platform Owners Support dependency tracking and issue resolution.
Skill Requirements
Identity and Access Management technologies Vulnerability Management concepts Security patching methodologies Change Management processes Windows/Linux administration fundamentals Security compliance and audit practices
Other Requirements
Vulnerability Tools Exposure Cisco Vulnerability Management (Kenna) Rapid7 Wiz Security advisory interpretation