Sr. Access Control Specialist

sunlife; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Sun Life is seeking a Senior Access Control Specialist to join the Identity and Access Management team. The role focuses on administration, engineering, and continuous improvement of enterprise authentication and access management solutions.

You will provide operational support for Okta MFA/OAuth and Transmit Security MFA, design secure authentication workflows, and drive platform security and reliability across production environments.

Qualifications

• 5+ years of experience in Identity and Access Management (IAM).
• 5+ years administering enterprise MFA platforms.
• Experience supporting Okta MFA and OAuth services.
• Experience administering Transmit Security MFA or similar CIAM platforms.
• Experience supporting production authentication services.

Responsibilities

• Provide day-to-day operational support for IAM platforms (Okta MFA, Okta OAuth, Transmit Security MFA).
• Design, configure, and implement authentication and authorization solutions.
• Support platform upgrades, integrations and on-call incidents.
• Ensure compliance with security standards and audit requests.
• Collaborate with application owners and security teams on roadmaps.

Skills

Identity and Access Management

Incident management

Security compliance

Tools

Okta MFA

Okta OAuth

Transmit Security MFA

OAuth 2.0

OIDC

SAML

Active Directory

Job description

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

About the job :

The Senior Access Control Specialist is a key member of Sun Life's Identity and Access Management (IAM) team, responsible for the administration, engineering, support and continuous improvement of enterprise authentication and access management solutions.

The role provides technical expertise across authentication technologies, including Okta MFA, Okta OAuth and Transmit Security MFA , ensuring secure, reliable and highly available authentication services across the enterprise.

The Specialist plays a critical role in maintaining platform stability and security while supporting incident management, change implementation, platform upgrades, integrations and operational excellence.

This role is ideal for an Experienced Identity and Access Management (IAM) Professional, with a strong background in authentication technologies and who is passionate about designing secure, scalable and resilient solutions and support operational excellence across the enterprise ecosystem.

What will you do?

Operational Support & Administration:

• Provide day-to-day operational support for Okta MFA, Okta OAuth, and Transmit Security MFA platforms.
• Monitor platform health, availability, performance, and service levels.
• Investigate and resolve incidents, service requests, and authentication-related issues.
• Support production and non-production environments.
• Perform user and administrator access management activities.
• Participate in on-call support and critical incident response when required.
• Maintain operational runbooks, support procedures, and knowledge articles.

Platform Engineering:

• Design, configure, and implement authentication and authorization solutions.
• Develop and maintain OAuth/OIDC integrations for applications and APIs.
• Implement MFA policies, adaptive authentication controls, and access governance requirements.
• Support new application onboarding to Okta and Transmit Security platforms.
• Configure identity federation, SAML, OAuth 2.0, OpenID Connect (OIDC), and API security controls.
• Automate operational activities using APIs, scripting, and workflow automation.

Security & Compliance:

• Ensure authentication platforms comply with security standards and regulatory requirements.
• Participate in audit requests and evidence collection.
• Support vulnerability remediation activities.
• Review authentication controls and access policies.
• Implement security best practices across MFA and OAuth services.
• Plan, implement, and validate platform changes and upgrades.
• Participate in change management and CAB processes.

Stakeholder Engagement:

• Work closely with application owners, infrastructure teams, security teams, and vendors.
• Provide technical guidance and support to project teams.
• Assist with platform roadmaps, modernization initiatives, and strategic improvements.

What do you need to succeed?

• 5+ years in Identity and Access Management (IAM).
• 5+ years administering enterprise MFA platforms.
• Experience supporting Okta MFA and OAuth services.
• Experience administering Transmit Security MFA or similar CIAM platforms.
• Experience supporting business-critical authentication services in production environments.
• Strong troubleshooting and incident management experience.
• Experience with change, release, and problem management processes.

Preferred skills:

• Okta MFA and OAuth Administration.
• Platform Engineering and Automation.
• Active Directory.
• Postman/Bruno, REST API.
• MFA or CIAM Platforms.

Unique Requirements:

• This role requires Reliability Status Clearance. In addition to a law enforcement inquiry and a credit check, as part of your application, the Government of Canada will ask if you lived or travelled outside of Canada for 6-consecutive months during the last 5 years, and you must account for all activities during this time.

What's in it for you?

Being a member of the Sun Life family, a group of people united by our Purpose: to help Clients and Employees achieve lifetime financial s