Identity & Access Governance Analyst

Identity & Access Governance Analyst

We are seeking an analyst to help establish and mature enterprise access governance practices across core business applications and services.

This role will work closely with business application owners, operational teams, IT, and Cybersecurity to define how access should be requested, approved, provisioned, reviewed, and removed. The position will also design and automate identity lifecycle processes and help connect access governance activities to broader organizational governance and compliance objectives.

The role will initially focus heavily on workforce access and business application entitlements, with scope expanding to workload, system, and agentic identities, as well as information governance and related Microsoft 365 controls.

Location: 100 Citigate Drive, Ottawa, ON

Vacancy Type: New

DUTIES & RESPONSIBILITIES:

• Analyze business application access, roles, permissions, and entitlements and work with application owners to establish appropriate access models using RBAC, ABAC, and related approaches.
• Develop and maintain processes for access requests, approvals, provisioning, removals, periodic access reviews, and certification.
• Design and automate Joiner, Mover, and Leaver workflows and related integrations using tools such as Microsoft Entra, Power Automate, ITSM, PowerShell, Python, APIs, and other automation platforms.
• Evaluate and implement appropriate Microsoft Entra Identity Governance capabilities, including Entitlement Management, Lifecycle Workflows, Access Reviews, and PIM.
• Develop governance practices for non-human identities, including service accounts, application identities, workload identities, and agentic identities.
• Partner with Microsoft 365, Cybersecurity, and other technical teams on Conditional Access, Microsoft Purview, DLP, information protection, and related governance initiatives.
• Establish clear ownership, approval, review, and documentation standards for applications, roles, entitlements, and identity lifecycle processes.
• Develop reporting and audit evidence to demonstrate that access governance controls are operating effectively.
• Identify opportunities to simplify and automate manual access-management processes while improving consistency, traceability, and user experience.

REQUIREMENTS:

• Experience in identity and access management, identity governance, business or systems analysis, enterprise application administration, security, or a related technical discipline.
• Strong understanding of identity lifecycle management, access controls, least privilege, RBAC, ABAC, approvals, and access certification concepts.
• Experience gathering business requirements and translating them into practical technical processes and controls.
• Working knowledge of Microsoft Entra ID, Active Directory, Microsoft 365, and enterprise application access management.
• Experience with automation or integration technologies such as PowerShell, Python, REST APIs, Microsoft Graph, Power Automate, or similar tools.
• Strong analytical, documentation, communication, and stakeholder-management skills.

PREFERRED QUALIFICATIONS:

• Experience with one or more of the following would be considered an asset
• Microsoft Entra Identity Governance, PIM, Microsoft Purview, DLP, ServiceDesk Plus or another ITSM platform, SCIM or automated provisioning, SQL/data analysis, and governance of workload or service identities.

SKILLS & COMPETENCIES:

• The successful candidate will be able to understand how people perform their jobs and translate those responsibilities into appropriate access. They should be comfortable working between business and technical teams, analyzing complex permission structures, designing practical governance processes, and identifying opportunities for automation.
• Strong candidates will demonstrate systems thinking, sound judgement, attention to auditability and control effectiveness, and an ability to balance governance requirements with operational usability.

COMPENSATION INFORMATION:

The expected range for this position is $70,000 - $90,000 annually. Placement within the range is dependent on a variety of factors including qualifications and experience.

TOMLINSON OFFERS:

• Competitive wages
• Bonus programs
• Employer paid health and dental benefits
• Extensive training programs and tuition reimbursement
• Retirement benefits program
• Family-oriented team environment
• Employee discounts and other rewards programs

The Tomlinson Group of Companies encourages applications from all qualified candidates. Please contact Human Resources if you need accommodation at any stage of the application process or want more information on our accommodation policies. We are committed to leveraging the latest technology to enhance our recruitment process. We may use AI tools in the screening and selection of candidates to efficiently and fairly assess all applicants. A Recruiter will review all results generated by AI. If you have any questions, please contact our HR department.