Senior IAM Specialist

Parkland; Calgary; On-site; CAD 90,000 - 140,000; Full time

Job summary

Sunoco LP in Calgary is seeking a Senior Identity & Access Management (IAM) Specialist to lead identity governance and access initiatives across the enterprise. You will manage AD and Entra ID, and oversee SailPoint Identity IQ deployments to ensure security and reliability.

The role emphasizes automation with PowerShell, provisioning and certifications, and cross‑functional collaboration. You will participate in on‑call rotations and contribute to IAM best practices.

Qualifications

• 2+ years of experience with Micro Focus (NetIQ) DRA or similar AD tools.
• 2+ years of hands-on experience with SailPoint Identity IQ or comparable IGA platforms.
• 5–8 years of experience in IAM or access management.
• Experience with enterprise directories and identity sources/targets (Active Directory, Entra ID).
• Strong understanding and experience with modern authentication and identity standards (SAML, OpenID Connect, SCIM, MFA, SSO).

Responsibilities

• Manage and optimize the administration, configuration, and maintenance of accounts, groups, and mailboxes in Active Directory, with a focus on automation and process efficiency.
• Independently troubleshoot and resolve access and security issues across file shares, applications, and accounts in collaboration with IT and business stakeholders.
• Administer, configure, and maintain the SailPoint Identity IQ platform and its underlying infrastructure to ensure stability, security, and operational reliability.
• Lead configuration and ongoing administration of SailPoint Identity IQ capabilities, including identity lifecycle management, provisioning/deprovisioning, access requests, certifications, and segregation-of-duties controls.
• Improve identity lifecycle processes (onboarding, transfers, offboarding) by managing authoritative sources, downstream provisioning, and revocation workflows.
• Develop PowerShell scripts for automation and operational support.
• Develop, maintain, and enforce departmental and project standards while contributing to team and project objectives.
• Demonstrate advanced knowledge of IAM technologies and best practices.
• Participate in an on-call rotation for critical IAM services.
• Support Active Directory migration and consolidation initiatives.

Skills

Identity governance

PowerShell scripting

Collaboration across teams

Tools

SailPoint Identity IQ

Active Directory

Entra ID

Okta

OneLogin

Ping Identity

Job description

Parkland is a leading international fuel supplier, convenience store operator, and community enabler, serving diverse customers across 26 countries.

Sunoco LP is looking for a Senior Identity & Access Management (IAM) Specialist to contribute to key identity governance and access management initiatives. This is a high‑impact role supporting our enterprise security posture.

As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation. For more information, please visit www.sunocolp.com .

Sunoco LP is a leading energy infrastructure and fuel distribution master limited partnership operating across 32 countries and territories in North America, the Greater Caribbean, and Europe. The Partnership’s midstream operations include an extensive network of approximately 14,000 miles of pipeline and over 160 terminals. This critical infrastructure complements the Partnership’s fuel distribution operations, which distribute over 15 billion gallons annually to approximately 11,000 Sunoco and partner-branded retail locations, as well as independent dealers and commercial customers.

At Sunoco, we take great pride in what we do and wholeheartedly believe our employees drive success for our company and our customers. We are always looking for the best and brightest talent and are committed to making your job a challenging and rewarding experience.

• A place where you can take your career in the direction you want to grow and go

The Opportunity:

Sunoco LP is seeking an Identity & Access Management (IAM) Specialist with expertise in Active Directory and Microsoft Entra ID. This role is responsible for identity lifecycle operations, access troubleshooting, governance processes, and enterprise IAM initiatives.

Responsibilities:

• Manage and optimize the administration, configuration, and maintenance of accounts, groups, and mailboxes in Active Directory, with a focus on automation and process efficiency
• Independently troubleshoot and resolve access and security issues across file shares, applications, and accounts in collaboration with IT and business stakeholders
• Administer, configure, and maintain the SailPoint Identity IQ platform and its underlying infrastructure to ensure stability, security, and operational reliability
• Lead configuration and ongoing administration of SailPoint Identity IQ capabilities, including identity lifecycle management, provisioning/deprovisioning, access requests, certifications, and segregation‑of‑duties controls
• Improve identity lifecycle processes (onboarding, transfers, offboarding) by managing authoritative sources, downstream provisioning, and revocation workflows
• Develop PowerShell scripts for automation and operational support
• Develop, maintain, and enforce departmental and project standards while contributing to team and project objectives
• Demonstrate advanced knowledge of IAM technologies and best practices
• Participate in an on‑call rotation for critical IAM services
• Support Active Directory migration and consolidation initiatives

Education:

Requirements:

• 2+ years of experience with Micro Focus (NetIQ) DRA or similar AD tools
• 2+ years of hands‑on experience with SailPoint Identity IQ or comparable IGA platforms
• 5–8 years of experience in IAM or access management
• Experience with enterprise directories and identity sources/targets (Active Directory, Entra ID)
• Strong understanding and experience with modern authentication and identity standards (SAML, OpenID Connect, SCIM, MFA, SSO)
• High accuracy, attention to detail, and precision in execution
• Excellent written and verbal communication skills
• Ability to work independently and provide clear, consistent status updates
• Strong team contributor with a collaborative mindset
• Comfortable operating in a fast‑paced environment with shifting priorities
• Willingness to adapt and expand skillsets as organizational needs evolve

Preferred Qualifications:

• Experience with Privileged Access Management tools
• Experience with enterprise SSO tools like Okta, EntraID, OneLogin, Ping, etc.
• Experience with ServiceNow
• ITIL certification

Humble. Hungry. Smart. Does this sound like you?

Do others describe you as being a down-to-earth achiever? Someone who thinks outside the box and always strives to do more than what is required? Someone who sees the bigger picture? You sound brilliant to work with!

We are committed to providing equal opportunities to all applicants. If you require accommodation due to a disability, you will have an opportunity to notify us when scheduling your interview.

We are an equal opportunity employer and encourage applications from all qualified individuals. Our ability to work as one team across Canada, the United States, and the Caribbean is foundational to our success. We show up as our authentic selves each day and create space for one another’s unique contributions.

We respect the diverse cultures, traditions, and perspectives of Indigenous Peoples and seek to achieve equitable partnerships and opportunities with Indigenous communities.

The Fine Print:

Candidates must be legally eligible to work in the country in which they applied. Regrettably, we are unable to sponsor employment visas at this time.

Final candidates will be required to undergo a confidential pre-employment background check, including but not limited to educational, criminal, credit, drug and alcohol, and/or fitness for duty testing.