Identity & Access Governance Analyst

Identity & Access Governance Analyst
We are seeking an analyst to help establish and mature enterprise access governance practices across core business applications and services.

This role will work closely with business application owners, operational teams, IT, and Cybersecurity to define how access should be requested, approved, provisioned, reviewed, and removed. The position will also design and automate identity lifecycle processes and help connect access governance activities to broader organizational governance and compliance objectives.

The role will initially focus heavily on workforce access and business application entitlements, with scope expanding to workload, system, and agentic identities, as well as information governance and related Microsoft 365 controls.

Location:

100 Citigate Drive, Ottawa, ON

Vacancy Type:
New

DUTIES & RESPONSIBILITIES

Analyze business application access, roles, permissions, and entitlements and work with application owners to establish appropriate access models using RBAC, ABAC, and related approaches.

Develop and maintain processes for access requests, approvals, provisioning, removals, periodic access reviews, and certification.

Design and automate Joiner, Mover, and Leaver workflows and related integrations using tools such as Microsoft Entra, Power Automate, ITSM, Power Shell, Python, APIs, and other automation platforms.

Evaluate and implement appropriate Microsoft Entra Identity Governance capabilities, including Entitlement Management, Lifecycle Workflows, Access Reviews, and PIM.

Develop governance practices for non-human identities, including service accounts, application identities, workload identities, and agentic identities.

Partner with Microsoft 365, Cybersecurity, and other technical teams on Conditional Access, Microsoft Purview, DLP, information protection, and related governance initiatives.

Establish clear ownership, approval, review, and documentation standards for applications, roles, entitlements, and identity lifecycle processes.

Develop reporting and audit evidence to demonstrate that access governance controls are operating effectively.

Identify opportunities to simplify and automate manual access-management processes while improving consistency, traceability, and user experience.

REQUIREMENTS

Experience in identity and access management, identity governance, business or systems analysis, enterprise application administration, security, or a related technical discipline.

Strong understanding of identity lifecycle management, access controls, least privilege, RBAC, ABAC, approvals, and access certification concepts.

Experience gathering business requirements and translating them into practical technical processes and controls.

Working knowledge of Microsoft Entra , Active Directory, Microsoft 365, and enterprise application access management.

Experience with automation or integration technologies such as Power Shell, Python, REST APIs, Microsoft Graph, Power Automate, or similar tools.

Strong analytical, documentation, communication, and stakeholder-management skills.

PREFERRED QUALIFICATIONS

Experience with one or more of the following would be considered an asset

Microsoft Entra Identity Governance, PIM, Microsoft Purview, DLP, Service Desk Plus or another ITSM platform, SCIM or automated provisioning, SQL/data analysis, and governance of workload or service identities.

SKILLS & COMPETENCIES

The successful candidate will be able to understand how people perform their jobs and translate those responsibilities into appropriate access. They should be comfortable working between business and technical teams, analyzing complex permission structures, designing practical governance processes, and identifying opportunities for automation.

Strong candidates will demonstrate systems thinking, sound judgement, attention to auditability and control effectiveness, and an ability to balance governance requirements with operational usability.

COMPENSATION INFORMATION
The expected range for this position is $70,000 - $90,000 annually. Placement within the range is dependent on a variety of factors including qualifications and experience.

TOMLINSON OFFERS

Competitive wages

Bonus programs

Employer paid health and dental benefits

Extensive training programs and tuition reimbursement

Retirement benefits program

Family-oriented team environment

Employee discounts and other rewards programs

The Tomlinson Group of Companies encourages applications from all qualified candidates. Please contact Human Resources if…