Info Security Analyst

Strategize It; Toronto; Sur place; CAD 110 000 - 150 000; Plein temps

Résumé du poste

Strategize it Inc. is seeking a Senior Information Security Specialist, Authentication services to design, implement, and operate secure authentication and identity solutions across the enterprise. You will lead SSO/MFA initiatives, manage AzureAD, AWS IAM, and GCP IAM, and collaborate with app teams to onboard applications.

Focus on risk-based access controls and compliance with ISO 27001/NIST. The role requires hands-on experience with modern authentication protocols, strong communication, and

Qualifications

• Bachelor’s degree (or equivalent) in Computer Science, Information Technology, Engineering, or a related field.
• Microsoft Certified: Identity and Access Administrator Associate certification is an asset.
• Basic knowledge of cybersecurity frameworks such as ISO27001 or NIST.

Responsabilités

• Design, implement, and support enterprise authentication solutions, including SSO and MFA.
• Develop, implement, and manage Conditional Access policies to enforce risk-based access controls.
• Manage and optimize identity platforms such as AzureAD, AWS IAM, and GCP IAM.
• Integrate applications using protocols including SAML, OAuth, OpenID Connect (OIDC), and SCIM.
• Collaborate with application teams to onboard and secure enterprise applications.
• Ensure authentication services align with cybersecurity frameworks (ISO 27001, NIST).
• Troubleshoot and resolve authentication and access-related issues.
• Maintain documentation, standards, and procedures for authentication services.
• Contribute to strategic IAM initiatives and continuous improvement efforts.

Connaissances

Azure SSO

MFA

IAM

SAML/OIDC/OAuth

Interpersonal skills

Formation

Bachelor’s degree in CS/IT/Engineering

Microsoft Certified: Identity and Access Administrator Associate

Outils

Azure AD

AWS IAM

GCP IAM

SCIM

Description du poste

The Senior information Security Specialist, Authenticationservices is responsible for the design, implementation, and operation ofsecure, scalable authentication and identity solutions across the enterprise.This role ensures seamless access to applications while maintaining strongsecurity controls aligned with industry best practices and organizationalstandards.

• Design, implement, and support enterpriseauthentication solutions, including Single Sign-On (SSO) and Multi-FactorAuthentication (MFA).
• Develop, implement, and manage Conditional Accesspolicies to enforce risk-based access controls, device compliance, usercontext, and location-based restrictions.
• Manage and optimize identity platforms such as AzureAD, AWS IAM, and GCP IAM.
• Integrate applications using modern authenticationprotocols including SAML, OAuth, OpenID Connect (OIDC), and SCIM.
• Collaborate with application teams to onboard andsecure enterprise applications.
• Ensure authentication services align with cybersecurityframeworks (e.g., ISO 27001, NIST).
• Troubleshoot and resolve authentication andaccess-related issues.
• Maintain documentation, standards, and operationalprocedures for authentication services.
• Contribute to strategic IAM initiatives and continuousimprovement efforts.

Experience:

• At least 5 years of hands-on experience withauthentication solutions such as Azure SSO, MFA, and IAM in AWS and GCP.
• Minimum of 3 years implementing and managingenterprise-level SSO and MFA for applications.
• Experience working with modern authentication protocolsand standards, including SAML, OIDC, OAuth, and SCIM.

Skills:

• Excellent communication, negotiation, and interpersonalskills, with experience working in diverse teams within a large enterpriseenvironment.
• Strong attention to detail, effective planning skills,and a proactive, self-motivated approach. Ability to analyze problems,think critically, and influence others.
• Solid understanding of Identity and Access Management(IAM) principles, including directory and authentication services.

Certifications/Education:

• Bachelor’s degree (or equivalent) in Computer Science,Information Technology, Engineering, or a related field.
• Microsoft Certified: Identity and Access AdministratorAssociate certification is an asset.
• Basic knowledge of cybersecurity frameworks such as ISO27001 or NIST.