Join the IT Security Team, in the Specialist, Identity & Access Management position. Permanent, hybrid work, in Montreal or Ottawa The successful candidate will ensure the operational integrity and consistent application of identity and access management (IAM) controls for assigned systems and applications, interpreting complex access scenarios to make sound control decisions aligned with IAM policies, standards, and risk considerations. Operating with a high degree of autonomy, it resolves access issues while escalating systemic risks or policy gaps as needed, directly contributing to reduced access related risk, regulatory compliance, and consistent access control enforcement across the organization.
What you'll do: - Interpret identity lifecycle events (onboarding, role changes, transfers, offboarding) to determine appropriate, risk aligned access.
- Validate and authorize access provisioning and deprovisioning in line with approved access models, policies, and compliance requirements.
- Lead end to end access reviews for assigned systems, challenging access appropriateness and driving required remediation.
- Identify, investigate, and remediate inappropriate, excessive, or unauthorized access within defined authority.
- Monitor IAM activities and access patterns to detect control weaknesses, policy deviations, and compliance gaps.
- Ensure integrity, completeness, and auditability of IAM records and supporting evidence for audits and investigations.
- Participate in access related incident investigations, perform root cause analysis, and oversee implementation of corrective actions.
- Drive continuous improvement of IAM controls and processes, exercising sound judgment in non standard scenarios and escalating systemic risks as needed.
What you should have: - A bachelor's degree in Information Technology, Cybersecurity, or a related field, or equivalent experience.
- Relevant certification required or in progress (e.g., Security+, IAM related certification).
- A minimum of 5 years of experience in identity and access management, IT operations, or security related roles.
- Demonstrated experience administering identity lifecycle and access provisioning controls.
- Strong analytical and problem-solving skills, including the ability to interpret policies and apply judgments in non-standard scenarios.
- Demonstrated ability to assess access risks and determine appropriate control actions within defined frameworks.
- The ability to apply IAM policies consistently and exercise judgment within defined frameworks
