Technical Lead, Identity

**Why Work Here?**

Employees at ATCO are offered endless variety. We are entrepreneurial with a large degree of autonomy and freedom, experiencing new situations and learning opportunities every day. Internal advancement is commonplace, and we are always supported in our career journey. We believe in creating a workplace where you can thrive professionally while contributing to something greater and serving our communities.

**About the Role**:
As the IAM Technical Lead, you will provide both functional leadership and technical guidance for ATCO’s Enterprise Identity and Access Management (IAM) technologies, overseeing all technical aspects of IAM project delivery. You will ensure that robust IAM governance, technologies, and processes are established and maintained to meet internal, regulatory, and audit compliance objectives. In this role, you will deliver secure and scalable solutions that align with business strategy, while supporting the organization’s evolving access needs. Additionally, you will oversee the day-to-day operations of IAM technologies, ensuring Service Level Agreements are consistently met and adjusted as necessary, and that all projects deliver secure IAM solutions.

**What You Get to Do**:
Identity and Access Management Technologies
- Ensure IAM solutions and processes meet all legal, regulatory, and audit requirements, including financial reporting and segregation of duties.
- Oversee Okta configuration and integration, and govern SSO/MFA architecture across the organization.
- Maintain and optimize IAM technologies, including identity lifecycle management, authentication, authorization, and Privileged Access Management.
- Support audits, report on IAM Key Performance Indicators, and participate in change management to uphold security standards.

Identity and Access Management Project Work and Oversight
- Provide technical leadership for IAM projects, including privileged access management, access provisioning, and process automation.
- Collaborate with business, project, architecture, and infrastructure teams to align IAM requirements and operationalize supporting processes.
- Mentor IAM team members to build technical skills and competence.

Advanced Troubleshooting and Incident Resolution
- Lead root cause analysis (RCA) for recurring technology and operational IAM-related incidents and work with other IT and security teams to implement corrective actions.
- Identify and implement opportunities for process automation to streamline IAM workflows, including user provisioning/de-provisioning, access requests, and role changes.
- Contribute to the ongoing optimization of IAM tools and technologies, leveraging scripting, API integrations, and automation tools to reduce manual effort and enhance efficiency.
- Support and be available on an on-call basis as required.

IAM Technology Strategy
- Together with IAM leadership, develop identity and access management technology strategy to support IAM roadmap.
- Champion the continual improvement of IAM technologies, controls and related processes to enhance overall security posture and operational efficiency.
- Define IAM security architecture and develop a roadmap for IAM technology maturity.
- Stay abreast of new technologies, trends and issues in the IAM domain, including current technologies, platforms, standards, authentication methodologies, and IAM best practices.
- Ensure IAM technology configurations meet all legal, regulatory and compliance requirements.
- Foster and maintain strong relationships with internal stakeholders.

**What You Bring**:

- Related post-secondary education
- 7+ years of identity and access management experience
- Strong understanding of authentication protocols and IT audit compliance
- Strong knowledge of MS Active Directory and Azure Active Directory
- Experience with Role-Based Access Control (RBAC), Just-in-Time (JiT) access, and Privileged Access Management (PAM)
- Proven ability to architect, deploy, and manage integrated IAM systems in complex enterprise environments
- Access certification (Saviynt, Okta or Delinea)
- Ability to provide rotational after-hours on-call support
- Exceptional problem-solving, organizational, interpersonal, written and verbal communication skills
- Conscientious self-starter who enjoys working in a team environment, needs mínimal supervision, fosters collaborative working groups, and can cope effectively under pressure with shifting priorities
- Sound judgment, tact and diplomacy in challenging situations
- Experience and understanding of Cloud Application Security capabilities and limitations
- Experience working with 3rd party service providers
- Project Experience is an asset
- CIAM, CISSP, and/or CISM designations are an asset
- Business analysis experience is an asset
- Technical writing experience is an asset
- Okta Professional or Okta Administrator certification is considered an asset

**What We Offer**:

- A culture based on caring, integrity, agility, collaborati