Job Description:

About the job:

The Senior Access Control Specialist is a key member of Sun Life's Identity and Access Management (IAM) team, responsible for the administration, engineering, support and continuous improvement of enterprise authentication and access management solutions.

The role provides technical expertise across authentication technologies, including Okta MFA, Okta OAuth and Transmit Security MFA, ensuring secure, reliable and highly available authentication services across the enterprise.

The Specialist plays a critical role in maintaining platform stability and security while supporting incident management, change implementation, platform upgrades, integrations and operational excellence.

This role is ideal for an Experienced Identity and Access Management (IAM) Professional, with a strong background in authentication technologies and who is passionate about designing secure, scalable and resilient solutions and support operational excellence across the enterprise ecosystem.

What will you do?

Operational Support & Administration:

• Provide day-to-day operational support for Okta MFA, Okta OAuth, and Transmit Security MFA platforms.
• Monitor platform health, availability, performance, and service levels.
• Investigate and resolve incidents, service requests, and authentication-related issues.
• Support production and non-production environments.
• Perform user and administrator access management activities.
• Participate in on-call support and critical incident response when required.
• Maintain operational runbooks, support procedures, and knowledge articles.

Platform Engineering:

• Design, configure, and implement authentication and authorization solutions.
• Develop and maintain OAuth/OIDC integrations for applications and APIs.
• Implement MFA policies, adaptive authentication controls, and access governance requirements.
• Support new application onboarding to Okta and Transmit Security platforms.
• Configure identity federation, SAML, OAuth 2.0, OpenID Connect (OIDC), and API security controls.
• Automate operational activities using APIs, scripting, and workflow automation.

Security & Compliance:

• Ensure authentication platforms comply with security standards and regulatory requirements.
• Participate in audit requests and evidence collection.
• Support vulnerability remediation activities.
• Review authentication controls and access policies.
• Implement security best practices across MFA and OAuth services.
• Plan, implement, and validate platform changes and upgrades.
• Participate in change management and CAB processes.

Stakeholder Engagement:

• Work closely with application owners, infrastructure teams, security teams, and vendors.
• Provide technical guidance and support to project teams.
• Assist with platform roadmaps, modernization initiatives, and strategic improvements.

What do you need to succeed?

• 5+ years in Identity and Access Management (IAM).
• 5+ years administering enterprise MFA platforms.
• Experience supporting Okta MFA and OAuth services.
• Experience administering Transmit Security MFA or similar CIAM platforms.
• Experience supporting business-critical authentication services in production environments.
• Strong troubleshooting and incident management experience.
• Experience with change, release, and problem management processes.
• Preferred skills:
  - Okta MFA and OAuth Administration.
  - Platform Engineering and Automation.
  - Active Directory.
  - Postman/Bruno, REST API.
  - MFA or CIAM Platforms.

Unique Requirements:

This role requires Reliability Status Clearance. In addition to a law enforcement inquiry and a credit check, as part of your application, the Government of Canada will ask if you lived or travelled outside of Canada for 6-consecutive months during the last 5 years, and you must account for all activities during this time.

What9;s in it for you?

• Being a member of the Sun Life family, a group of people united by our Purpose: to help Clients and Employees achieve lifetime financial security and live healthier lives.
• An environment of continuous learning, development, and improvement.
• Internal mobility is supported by leaders who are dedicated to fueling your professional growth.
• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Salary Range:
90,000/90 000 - 140,000/140 000

Job Category:
IT - Technology Services

Posting End Date:
15/09/2026