Senior Analyst, Identity Lifecycle Management

Nexus Systems Group Inc.; Toronto; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading technology solutions provider in Toronto is seeking an experienced IT security professional to manage identity & access processes. You will require deep expertise in Active Directory and privileged access management tools like Centrify or CyberArk. Responsibilities include onboarding workflows, managing access controls, and supporting audits. The ideal candidate has strong communication skills to engage with both technical and business stakeholders, with a background in computer science or equivalent experience.

Qualifications

• 8+ years technical experience in information technology or information security.
• 4 years experience in administration of Privileged Access Management tools.
• Hands-on experience in managing AD.
• 3-5+ years of experience with PowerShell scripting for AD tasks.

Responsibilities

• Improvising workflows for client onboarding and access platforms.
• Performing tasks for Logical Access Control relevant to Identity & Access Management.
• Providing support on access issues for ClientID and Windows ID.
• Managing AD Security Groups, Distribution Groups, and access management for Service Accounts.

Skills

Technical experience in information technology

Administration of Privileged Access Management tools (Centrify, CyberArk)

Access management on Windows

Advanced understanding of Active Directory

PowerShell scripting for AD administration tasks

Managing Users and Groups in Microsoft Active Directory and LDAP

Analyzing data using Excel

Education

Post-secondary degree in a technical field

Job description

Typical day in role

• Continuously provides value and consistency added to the user and customer experience by improvising workflows associated with client's onboarding and Logical Access platforms.
• Performs required tasks for Logical Access Control; tasks relevant to Identity & Access Management including access request, access provision/deprovision, communication, and documentation of operational processes and procedures, etc.
• Processes add/remove/change activities and provides support on access issues for ClientID, Windows ID (Active Directory).
• Manages AD Security Groups, Distribution Groups, Group Mailboxes access management Service Accounts.
• Utilizes troubleshooting skills to understand moderately complex systems/issues related to user identity and access, and potential root causes.
• Liaises with 2nd and 3rd level support when required.
• Provides reports and data, as requested, for audits and walkthroughs of internal controls IAMOPS ILM owned processes.

Candidate requirements / must-have skills

1. At least 8+ years technical experience in information technology or information security.
2. At least 4 years experience in the administration of Privileged Access Management tools like Centrify, CyberArk is required.
3. Hands‑on experience in access management on Windows and technical hands‑on experience in managing AD.
4. Advanced understanding of Active Directory.
5. 3‑5+ years of experience with PowerShell scripting for AD administration tasks, ServiceNow, SQL/Oracle.
6. 5‑7+ years of experience managing Users and Groups in on‑prem Microsoft Active Directory and LDAP.
7. Experience analyzing data using Excel is required.

Nice‑to‑have skills

1. Draft guideline of management of highly privileged domain accounts.
2. Provide support and guideline on clean‑up efforts for all production in‑scope domains.
3. Provide advisory services related to implementation and testing of Group Policy (GPOs).
4. Responsible for remediation tasks assigned to GIAM ILM team (including AD privileged account cleanup).
5. 3‑5+ years of experience with SailPoint IIQ.
6. Must possess proven experience working with a large enterprise distributed computing environment.

Soft skills

• Excellent written, presentation, and verbal communication skills to work well with technical peers and business stakeholders at different levels within the organization.
• Strong decision making, forward thinking and creative problem‑solving skills to anticipate and respond quickly to technological/market influences.
• Ability to work as part of a team, as well as work independently or with minimal direction.

Education

• Post‑secondary degree in a technical field such as computer science, computer engineering or equivalent work experience.