Identity and Access Management, Technical… at Air Canada · DORVAL

Identity and Access Management, Technical Analyst

Being part of Air Canada is to become part of an iconic Canadian symbol, recently ranked the best Airline in North America. Let your career take flight by joining our diverse and vibrant team at the leading edge of passenger aviation.

The IAM Technical Analyst will work in a fast-paced, innovative environment at one of North America's top airlines. Air Canada's IAM systems are foundational to protecting the data and systems that allow customers to fly safely. Air Canada is making significant investments to enhance its Identity and Access Management (IAM) capabilities through increased process maturity and technology enablement.

The primary responsibility of the IAM Technical Analyst is to support and mature Air Canada's IAM solutions with a focus on Microsoft Entra ID, identity federation, and privileged access management. This role is responsible for ensuring reliable authentication services, seamless user access experiences, operational excellence, and the continuous improvement of enterprise identity and access solutions.

This position may be located in Montreal or Toronto.

Responsibilities:

• Troubleshoot and resolve end-user incidents for Air Canada's IAM platforms, including identity data issues, provisioning failures, SSO authentication problems, MFA challenges, federation and token-related errors and privileged access issues.
• Perform administration and operational support for IAM solutions, including access verification, application onboarding, policy management, enterprise application administration, privileged account lifecycle management, vault administration and operational health monitoring.
• Support the integration of enterprise applications with Microsoft Entra ID and other identity providers using modern authentication standards such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM provisioning
• Administer and support privileged access controls, including privileged account onboarding, credential vaulting, session management, password rotation, privileged access reviews, emergency access processes, and least-privilege enforcement.
• Assist in the development, implementation, and continuous improvement of authentication and access management controls, including Conditional Access, MFA, passwordless authentication, risk-based access policies, and identity governance requirements.
• Contribute to the ongoing improvement of IAM workflows, policies, and procedures to support regulatory requirements and industry best practices, including evidence-ready processes for audits, access reviews, and privileged access controls.
• Coordinate and support delivery activities for IAM initiatives, including change impacts, testing coordination (SIT/UAT), training readiness, and documentation.
• Build and maintain strong relationships with stakeholders, vendors, and external partners to ensure IAM solutions remain aligned with business priorities and operational realities, and that issues are driven to resolution efficiently.
• Stay current on identity security trends and emerging capabilities within Microsoft Entra ID, CyberArk, PAM, authentication technologies, and Zero Trust security frameworks, proactively identifying opportunities to improve security posture, user experience, and operational efficiency.

Qualifications

• A relevant university degree, technical certification, and/or equivalent experience commensurate with the role.
• 3 to 5 years of IT technology operations and support experience in a large enterprise environment.
• 4+ years of hands-on IAM support experience in production environments, including troubleshooting authentication flows, federation issues, privileged access controls, and identity security-related incidents.
• Strong experience with Microsoft Entra ID and Idira (or equivalent Privileged Access Management platform) administration and troubleshooting.
• Experience supporting hybrid identity components with Active Directory, Entra Connect, and cloud-based authentication services.
• Strong working knowledge of modern authentication flows, Conditional Access fundamentals, MFA, Passwordless Authentication, and Identity Protection capabilities.
• Knowledge of privileged account governance, credential vaulting, session monitoring, password rotation, just-in-time access, and least-privilege principles.
• Understanding of authentication troubleshooting tools, sign-in logs, audit logs, token analysis, and identity security best practice.
• Proficiency in scripting and automation for operational efficiency and troubleshooting, including PowerShell and Python.
• Experience with Incident handling and ITIL process concepts and execution (Incident Management, Problem Management, and Change Management), including participation in change windows and CAB-aligned practices.
• Excellent written and verbal communication skills, including the ability to communicate effectively with technical teams and business stakeholders, and to produce clear, actionable documentation (runbooks, SOPs, troubleshooting guides).
• Strong analytical and problem-solving skills to identify, evaluate, and recommend options for IAM process and control improvements.
• Ability to work effectively under pressure and in rapidly changing environments or uncertain conditions, while maintaining attention to detail and operational discipline.
• Ability to work cooperatively with others on a team and to establish and maintain effective business relationships.
• Ability to handle multiple tasks in a fast-paced environment, prioritize effectively, and manage competing operational and delivery demands.
• Demonstrate punctuality and dependability to support overall team success in a fast-paced environment.

Conditions of Employment:

Candidates must be eligible to work in the country of interest at the time any offer of employment is made and are responsible for obtaining any required work permits, visas, or other authorizations necessary for employment. Prior to their start date, candidates will also need to provide proof of their eligibility to work in the country of interest.

Linguistic Requirements

Based on equal qualifications, preference will be given to bilingual candidates.

Diversity and Inclusion

Air Canada is strongly committed to Diversity and Inclusion and aims to create a healthy, accessible and rewarding work environment which highlights employees’ unique contributions to our company’s success.

As an equal opportunity employer, we welcome applications from all to help us build a diverse workforce which reflects the diversity of our customers, and communities, in which we live and serve.

Air Canada thanks all candidates for their interest; however only those selected to continue in the process will be contacted.