Senior Identity Analyst Hybrid

Job Summary

Central 1 cooperatively empowers credit unions and other financial institutions to deliver banking choice to Canadians. Central 1 provides critical services at scale to enable a thriving credit union system. We do this by collaborating with our clients, developing strategies, products and services to support the financial well-being of their more than 5 million diverse customers in communities across Canada. For more information, visit

• Review, develop and implement security measures for the protection of identities, computer systems, networks, and information
• Conduct risk assessments to identify potential security risks and vulnerabilities and develop strategies to mitigate those risks
• Define system security requirements in a zero-trust environment and prepare reports on results
• Review and document standard operating procedures, authentication and authorization patterns and identity life cycles
• Prepare detailed reports including assessment-based findings, outcomes and propositions for further identity, access and system security enhancement
• Act as the principal IAM security advisor to guide secure architecture decisions and drive consensus across project teams
• Participate in the implementation of new security solutions and contribute to security architecture documentation; maintain policies, standards, baselines, and guidelines

• Architect and champion the target-state security architecture for the organization’s internal and external IAM landscape, ensuring alignment with business objectives
• Develop and maintain a comprehensive identity strategy, roadmaps, and guide identity architecture decisions
• Develop and maintain processes to support Threat Modelling and Risk assessments at product and project levels
• Lead the planning and design of enterprise identity architecture and coordinate with system owners and stakeholders on identity controls
• Lead the creation of enterprise identity documents (architecture blueprints, policies, standards, baselines, guidelines and procedures) and contribute to the deployment of technology solutions following zero-trust practices

• Design tooling and platforms to provide capabilities within the identity and access arena
• Develop and maintain partnerships with Identity vendors to support organisational goals
• Maintain up-to-date knowledge of the identity industry, including new or revised identity solutions and threat vectors
• Recommend additional identity and security solutions or enhancements to improve overall enterprise security

• Participate in investigations into problematic identity activity and provide escalation support to identity and access issues; validate fixes to mitigate vulnerabilities
• Perform reviews, identify gaps in identity and access architecture and controls, and develop an identity governance plan
• Provide input on identity and zero-trust requirements to statements of work and other documents
• Evaluate identity and access architectures, user management processes, identity life cycles, and access controls to determine design adequacy

• University degree and 5+ years Information Technology related experience in an enterprise environment, ideally with 3+ years in Identity and Access Management
• One or more of the following certifications is preferred:
  Azure - Microsoft Certified:
  Identity and Access Administrator Associate

• Analyze and contribute to target state IAM and identity governance requirements
• Analyze and contribute to identity strategy, roadmaps, and identity documentation
• Experience designing and building PKI platforms to support secure applications (e.g., mTLS, SSL)
• Strong experience with SSO protocols (SAML, OAuth/OIDC), 3rd party integrations, API authentication and authorization
• Strong experience with RBAC, ABAC, identity lifecycle, delegated identity management, identity synchronization
• Design and implement identity tools supporting IAM, IGA, and CIAM functions
• Experience designing integrations of hardware and software solutions for complex web applications in an enterprise environment
• Experience designing countermeasures to identified…