Identity & Access Management Analyst

Toyota Canada Inc.; Toronto; Hybrid; CAD 80,000 - 100,000; Full time

Benefits offered by this job

Competitive compensation including bonus

Health care and dental benefits

Company pension plan

Vehicle discount programme

Reimbursement programmes

Paid holiday shutdown

Sabbatical leave programme

Job summary

Toyota Canada Inc. (TCI) is hiring an Identity and Access Management Analyst in Toronto. This full-time hybrid role focuses on designing and administering IAM solutions for secure access across TCI's ecosystem.

The successful candidate will work with identity platforms, develop policies, and enhance access processes while ensuring compliance with regulations like SOX and PIPEDA. A competitive compensation package and benefits including health care, a pension plan, and paid time off are offered.

Qualifications

• Minimum 5 years of progressive experience in IAM-focused roles.
• Hands-on experience with user lifecycle management and access governance.
• At least one IAM and one security certification required.

Responsibilities

• Support authentication, authorization, and access lifecycle management.
• Own identity flows across enterprise systems.
• Develop IAM policies and standards.

Skills

IAM-focused roles

User lifecycle management

RBAC

Access governance

IAM best practices

Compliance frameworks

Analysis

Communication skills

Education

University degree or college diploma in Computer Science, Cybersecurity, IT

Tools

Okta

Auth0

Azure AD

Salesforce

MuleSoft

Terraform

Job description

Scarborough, ON (Hybrid) – Toyota Canada Inc. (TCI) is looking for an Identity and Access Management Analyst to support its Information Services team. This full‑time role reports to the Manager, Enterprise Information Security and focuses on designing, administering and integrating IAM solutions that enable secure and seamless access for associates, dealers and customers across TCI’s digital ecosystem.

Identity Platform Management

• Act as a subject‑matter expert for enterprise‑wide identity platforms (Okta WIAM, Okta CIS, Auth0), ensuring secure integration of workforce and customer identities and seamless synchronization of user and dealer access across Salesforce and MuleSoft‑based systems.
• Configure, maintain and optimise IAM solutions to support authentication, authorisation and access lifecycle management across workforce, dealer and customer user base.
• Contribute to the development of platform roadmaps, ensuring alignment with enterprise security strategy, user‑experience objectives and evolving business needs.
• Collaborate with technical teams to integrate IAM solutions with new and existing systems, supporting initiatives that enable digital transformation securely.

Identity Integration & Governance

• Own identity flows across critical enterprise systems (Active Directory, Workday, SAP, Salesforce), ensuring consistent enforcement of access policies and standards.
• Support and enhance RBAC, MFA and SSO configurations to align with regulatory requirements (SOX, PIPEDA, privacy legislation) and industry frameworks.
• Partner with compliance, audit and security teams to identify and implement controls, conduct access reviews and strengthen governance practices.
• Develop IAM policies, standards and Toyota Canada’s IAM autonomy framework, ensuring platform configurations and implementations align with global standards while supporting localized governance, compliance and operational control.

Identity Processes & Enablement

• Document and implement repeatable IAM processes, ensuring identity operations are secure, efficient and scalable across all user groups.
• Support access certification campaigns and audit activities, ensuring identity controls meet internal policy and external regulatory obligations.
• Streamline access request and approval processes, balancing security requirements with business productivity and enabling a better end‑user experience.
• Support initiatives that automate provisioning, deprovisioning and access changes to reduce manual effort and operational risk.
• Collaborate with Enterprise Data and Privacy teams to synchronize identity attributes with TCI’s Salesforce Data Cloud and Data Access Layer platforms in compliance with Law 25 and data‑minimisation principles.

Vendor & Service Provider Liaison

• Act as the technical liaison with managed service providers (MSPs) and vendors supporting IAM platforms, ensuring technical updates, patches and upgrades align with enterprise roadmaps.
• Review vendor roadmaps, align them with organisational objectives and communicate platform changes or enhancements to internal stakeholders.
• Monitor service delivery against SLAs and KPIs, escalating issues and driving continuous improvement with external partners.

Operational Support & Continuous Improvement

• Provide Tier 2/3 escalation support for IAM‑related incidents, service requests and problems, collaborating with operational and security teams to ensure timely resolution.
• Analyse incident trends, user demands and operational gaps to inform future improvements, platform enhancements and process refinements.
• Advocate for a continuous improvement culture, leveraging lessons learned to enhance both security and user experience.
• Participate in post‑incident reviews, contribute to root‑cause analysis and support proactive measures that strengthen identity security posture.
• Develop automation scripts and workflows (Okta Workflows, Terraform) to enhance provisioning, monitoring and audit readiness; integrate system logs into centralised observability tools to support proactive incident detection and compliance reporting.

Qualifications

• University degree or college diploma in Computer Science, Cybersecurity, Information Technology or equivalent.
• Minimum 5 years of progressive experience in IAM‑focused roles, supporting and managing enterprise identity platforms (e.g., Okta, Auth0, Azure AD).
• At least one relevant IAM and one security certification required (e.g., CIAM, Okta Certified Professional/Admin, Auth0 Implementer, Microsoft SC‑300; CISSP, CCSP, CISM, CISA, SANS‑GIAC, CCSK).
• Hands‑on experience with user lifecycle management, RBAC, access governance and application integrations using identity standards (SAML, OIDC, OAuth, SCIM and Zero‑Trust principles).
• Familiarity with compliance frameworks (e.g., SOX, PIPEDA) and conducting access reviews to support regulatory obligations.
• Experience supporting incident investigations related to identity systems (e.g., MFA fatigue, account compromise).
• Familiarity with NIST Digital Identity Guidelines and IAM best practices for MFA, SSO and privileged access.
• Experience integrating IAM solutions in cloud and hybrid environments.
• Strong analytical and communication skills, with the ability to explain complex identity concepts to both technical and business audiences.
• Proven ability to work collaboratively across security, infrastructure and business teams.

Benefits

• Competitive compensation package including bonus.
• Extended health care and dental benefits effective immediately.
• Company pension plan with additional employer contributions.
• Associate vehicle discount programme.
• Reimbursement programmes (tuition & fitness).
• Paid holiday shutdown and competitive paid time off benefits.
• Sabbatical leave programme.

We are an equal‑opportunity employer that celebrates the diversity of the communities where we live and do business. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion or any other characteristics protected by law. Please advise us at any point during the recruitment and selection process or during your employment if you require accommodation.