Technical Analyst - Identity and Access Management

Joining Air Canada is about joining a Canadian symbol, Air Canada recently voted best airline in North America. Take your career to new heights by joining our innovative and diverse team at the forefront of passenger air transport.

The position can be based in Montreal or Toronto.

The Technical Analyst - Identity and Access Management (IAM) will work in an innovative and dynamic environment within one of the best airlines in North America. Air Canada's IAM systems are essential for protecting the data and systems that allow customers to travel safely. Air Canada is making significant investments in improving its Identity and Access Management (IAM) functions by focusing on increased process maturity and technological optimization.

The primary responsibility of the Technical Analyst - Identity and Access Management is to ensure the support and maturation of Air Canada's IAM solutions, with a focus on Microsoft Entra ID, identity federation, and privileged access management. The person occupying this position is responsible for guaranteeing reliable authentication services, seamless user access experiences, operational excellence, and continuous improvement of the company's identity and access solutions.

Responsibilities:

• Diagnose and resolve end-user incidents for Air Canada's IAM platforms, including issues related to identity data, provisioning failures, single sign-on issues, multi-factor authentication difficulties, federation and token errors, and privileged access problems.
• Ensure the administration and operational support of IAM solutions, including access verification, application integration, policy management, enterprise application administration, privileged account lifecycle management, vault administration, and operational robustness monitoring.
• Support the integration of enterprise applications with Microsoft Entra ID and other identity providers using modern authentication standards, such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Administer and support privileged access controls, including privileged account onboarding, credential vaulting, session management, password rotation, privileged access reviews, emergency access processes, and the enforcement of least privilege access principles.
• Participate in the development, implementation, and continuous improvement of authentication and access management controls, including conditional access, multi-factor authentication, passwordless authentication, risk-based access policies, and identity governance requirements.
• Contribute to the continuous improvement of workflows, policies, and procedures regarding identity and access management to support regulatory requirements and industry best practices, notably by setting up processes to provide evidence in the event of audits, access reviews, and privileged access controls.
• Coordinate and support execution activities for IAM initiatives, including change impact assessment, system integration test and user acceptance test coordination, training preparation, and documentation.
• Establish and maintain strong relationships with stakeholders, vendors, and external partners to ensure IAM solutions align with business priorities and operational realities, and that issues are resolved efficiently.
• Stay current on identity security trends and emerging capabilities within Microsoft Entra ID, CyberArk, privileged access management, authentication technologies, and zero-trust security frameworks, proactively identifying opportunities to improve security posture, user experience, and operational efficiency.

Qualifications

• University degree, technical certification, or equivalent and proportional experience to the position.
• Three to five years of experience in IT technology operations and support within a large enterprise.
• At least four years of hands-on IAM support experience in production environments, including troubleshooting authentication flows, federation issues, privileged access controls, and identity security incidents.
• Strong administrative and troubleshooting experience related to Microsoft Entra ID and Idira (or an equivalent privileged access management platform).
• Experience supporting hybrid identity components using Active Directory, Entra Connect, and cloud authentication services.
• Strong working knowledge of modern authentication flows, conditional access fundamentals, multi-factor authentication, passwordless authentication, and identity protection capabilities.
• Knowledge of privileged account governance, credential vaulting, session monitoring, password rotation, just-in-time access, and least privilege principles.
• Understanding of authentication troubleshooting tools, sign-in logs, audit logs, token analysis, and identity security best practices.
• Proficiency in scripting and automation to optimize operational efficiency and facilitate troubleshooting, notably PowerShell and Python.
• Experience in incident handling as well as ITIL concepts and process implementation (incident management, problem management, and change management), including participation in change windows and practices aligned with the change advisory board.
• Excellent written and oral communication skills, including the ability to communicate effectively with technical teams and business stakeholders, as well as produce clear and actionable documentation (operational runbooks, standard operating procedures, troubleshooting guides).
• Strong analytical and problem-solving skills that allow for identifying, evaluating, and recommending solutions aimed at improving IAM processes and controls.
• Ability to work effectively under pressure in a constantly changing environment or under uncertain conditions, paying attention to detail and demonstrating operational rigor.
• Ability to cooperate with other team members, as well as establish and cultivate effective business relationships.
• Ability to manage multiple tasks in a dynamic environment, effectively establish priorities, and manage competing operational and delivery requirements.
• Demonstrated punctuality and reliability to promote the overall success of the team in a fast-paced environment.

Employment Conditions:

Candidates must be eligible to work in the country concerned at the time an offer of employment is presented and are responsible for obtaining work permits, visas, or other necessary authorizations. Proof of eligibility must be provided before the start date.

Language Requirements

Equal skills being equal, preference will be given to bilingual candidates.

Diversity and Inclusion

Air Canada is strongly committed to diversity and inclusion and aims to create a healthy, accessible, and rewarding work environment that highlights the unique contribution of our employees to the success of our company.

As an equal opportunity employer, we encourage diverse applications so that we can build a workforce that is varied and representative of our customers and the communities where we live and offer our services.