Information Security Analyst, Intermediate

Brainhunter Systems Ltd; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

Brainhunter Systems Ltd. is seeking an Information Security Analyst, Intermediate to design, implement and operate scalable authentication services across the enterprise. You will manage SSO/MFA, Conditional Access, and IAM on Azure AD/AWS IAM/GCP IAM.

The role requires 5+ years in authentication, strong communication, and knowledge of ISO 27001/NIST. Hybrid work model in Toronto, with cross‑team collaboration for enterprise apps and security standards.

Qualifications

• Hands-on experience with authentication solutions and IAM in cloud platforms.
• Experience implementing SSO and MFA across enterprise apps.
• Knowledge of identity platforms and access management concepts.
• Bachelor degree in a relevant field; Microsoft identity certification is a plus.

Responsibilities

• Design, implement, and operate enterprise authentication solutions.
• Develop and enforce Conditional Access policies.
• Manage Azure AD, AWS IAM, and GCP IAM configurations.
• Integrate apps using SAML, OAuth, OIDC, and SCIM.
• Collaborate with application teams to secure enterprise apps.
• Ensure alignment with ISO 27001 and NIST controls.
• Troubleshoot authentication and access issues.
• Maintain documentation and runbooks for authentication services.
• Contribute to strategic IAM initiatives and improvements.

Skills

Strong communication

Analytical thinking

IAM principles

Security best practices

Education

Bachelor's degree in Computer Science / IT / Engineering

Tools

Azure SSO

MFA

AWS IAM

GCP IAM

SAML

OIDC

OAuth

SCIM

Job description

• Location city(s): Toronto, London, Winnipeg
• Role Title: Information Security Analyst, Intermediate (5-7 years)
• Work Allocation: 100%
• Work Style: Hybrid - 3
• Anticipated Start Date: 4 weeks from the official offer day (Aiming for early January'27)
• End Date: 12 months from the start date

The Senior information Security Specialist, Authentication services is responsible for the design, implementation, and operation of secure, scalable authentication and identity solutions across the enterprise. This role ensures seamless access to applications while maintaining strong security controls aligned with industry best practices and organizational standards.

• Design, implement, and support enterprise authentication solutions, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Develop, implement, and manage Conditional Access policies to enforce risk-based access controls, device compliance, user context, and location-based restrictions.
• Manage and optimize identity platforms such as Azure AD, AWS IAM, and GCP IAM.
• Integrate applications using modern authentication protocols including SAML, OAuth, OpenID Connect (OIDC), and SCIM.
• Collaborate with application teams to onboard and secure enterprise applications.
• Ensure authentication services align with cybersecurity frameworks (e.g., ISO 27001, NIST).
• Troubleshoot and resolve authentication and access-related issues.
• Maintain documentation, standards, and operational procedures for authentication services.
• Contribute to strategic IAM initiatives and continuous improvement efforts.

Experience:

• At least 5 years of hands-on experience with authentication solutions such as Azure SSO, MFA, and IAM in AWS and GCP.
• Minimum of 3 years implementing and managing enterprise-level SSO and MFA for applications.
• Experience working with modern authentication protocols and standards, including SAML, OIDC, OAuth, and SCIM.

Skills:

• Excellent communication, negotiation, and interpersonal skills, with experience working in diverse teams within a large enterprise environment.
• Strong attention to detail, effective planning skills, and a proactive, self-motivated approach. Ability to analyze problems, think critically, and influence others.
• Solid understanding of Identity and Access Management (IAM) principles, including directory and authentication services.

Certifications/Education:

• Bachelor's degree (or equivalent) in Computer Science, Information Technology, Engineering, or a related field.
• Microsoft Certified: Identity and Access Administrator Associate certification is an asset.

Basic knowledge of cybersecurity frameworks such as ISO 27001 or NIST