Senior Analyst Identity and Access Management

\r\n\r\nJob Description\r\n\r\n \r\n\r\nThe Opportunity:\r\n\r\nAs the Senior Analyst Identity and Access Management, you will report to the IAM Manager and play a key role in maturing Maple Leaf Foods’ identity, privileged access management, and Zero Trust capabilities. This is an opportunity to help shape enterprise identity controls, strengthen privileged access protection, and support secure access across a complex hybrid environment that includes corporate, cloud, and business-critical operational systems.\r\n \r\n\r\nCandidate Profile\r\nWe are looking for a motivated self-starter with strong analytical, technical, and problem-solving skills. The successful candidate will be able to assess complex identity and access challenges, synthesize information clearly, and provide practical recommendations to both technical and non-technical stakeholders.\r\n \r\n\r\nTechnical Focus\r\nYou will bring hands-on experience with privileged access management platforms, along with directory services, cloud identity, conditional access, identity lifecycle controls, access reviews, and privileged access governance.\r\n \r\n\r\nSecurity Mindset\r\nYou will understand IAM and PAM principles, support audit-ready control evidence, and apply security best practices aligned with least privilege, segregation of duties, and identity as the control plane for Zero Trust.\r\n \r\n\r\nMaple Leaf Foods offers a flexible hybrid working model working out of our Mississauga office.  \r\n \r\n\r\nAny MLF team member interested in being considered for this role are encouraged to apply online by August 27, 2026. Applications received beyond that date are not guaranteed consideration.\r\n \r\n\r\nReason for vacancy:  Existing Headcount \r\nCompensation:  $77,000 - $112,000 CAD base pay annually plus annual short-term incentive\r\n \r\n\r\nThe above compensation reflects the target compensation for the position at the time of posting. The base salary offered may vary based on a variety of factors including skills, experience, education, training, job- related knowledge, and other organizational requirements. For part-time roles, salaries are adjusted according to scheduled hours.  In addition to base salary, this role is eligible to participate in Maple Leaf’s annual short-term incentive plan. \r\n\r\n \r\n\r\nSnapshot of a Day-in-the-Life:\r\n\r\n\r\n\tAdminister and enhance privileged access management capabilities, including CyberArk Cloud onboarding, privileged account management, session controls, and service availability using platforms (Examples CyberArk, Saviyant, Delinea, etc).\r\n\tSupport secure access to servers, databases, applications, cloud services, and other enterprise systems by implementing standardized connection patterns and access controls.\r\n\tLead and support directory services Active Directory and cloud identity Microsoft Entra ID operational improvements, including group management, access policies, conditional access, and identity lifecycle processes.\r\n\tDesign, document, and deliver scalable, secure, and highly available IAM and PAM solutions that align with enterprise architecture, security standards, and business requirements.\r\n\tIdentify and remediate IAM and PAM risks, process gaps, control weaknesses, and implementation issues through structured analysis and clear recommendations.\r\n\tSupport joiner, mover, leaver, access review, and entitlement management processes to ensure access remains appropriate, timely, and aligned to business need.\r\n\tPerform and support scheduled and ad hoc access reviews for user, privileged, administrative, and service accounts, with a focus on least privilege and segregation of duties.\r\n\tProduce, maintain, and improve IAM and PAM documentation, including procedures, control evidence, operational runbooks, reporting, and audit support materials.\r\n\tTroubleshoot IAM, PAM, directory services Active Directory, and cloud identity Microsoft Entra ID access issues, documenting both one-time resolutions and opportunities for automation.\r\n\tCollaborate with Infrastructure, Cloud, Database, Security Engineering, User Experience, application teams, and the Project Office to deliver secure identity outcomes across projects and operations.\r\n\tDrive continuous improvement through process standardization, automation, reporting, and adoption of IAM, PAM, and Zero Trust best practices.\r\n\tSupport compliance with internal policies, regulatory obligations, and industry frameworks by maintaining visibility into identity controls, access risks, and remediation activities.\r\n\r\n\r\n \r\n\r\nWhat You’ll Bring:\r\n\r\nRequired Qualifications:\r\n\r\n\r\n\t5+ years of hands-on experience in identity and access management, privileged access management, security administration, infrastructure security, or related cybersecurity functions.\r\n\tPractical experience with directory services Active Directory and cloud identity platforms Microsoft Entra ID, including users, groups, roles, access policies, conditional access, and hybrid identity directory services.\r\n\tHands-on experience supporting PAM or IAM platforms (Examples CyberArk, Saviyant, Delinea, etc) or comparable privileged access management technologies.\r\n\tStrong understanding of IAM and PAM principles, including least privilege, segregation of duties, role-based access control, single sign-on, privileged access governance, and identity lifecycle management.\r\n\tAbility to assess identity risks, identify control gaps, track remediation activities, and provide clear recommendations to technical and non-technical stakeholders.\r\n\tExperience producing operational documentation, procedures, reports, and audit evidence to support business continuity and control compliance.\r\n\tStrong analytical skills, attention to detail, and ability to organize, prioritize, and track multiple operational and project activities.\r\n\tEffective verbal and written communication skills with the ability to explain complex identity risks and technical issues clearly across all levels of the organization.\r\n\tWorking knowledge of enterprise IT operations, including change management, incident management, project delivery, and cross-functional collaboration.\r\n\tAbility to use reporting, scripting, or analysis tools such as PowerShell, Excel, and PowerPoint to support access reviews, control reporting, and remediation tracking.\r\n\r\n\r\n \r\n\r\nPreferred Qualifications:\r\n\r\n\r\n\tExperience supporting identity controls in large, complex, hybrid, manufacturing, plant, or operational technology environments.\r\n\tExposure to identity governance, access certification, entitlement management, or user access review platforms and processes.\r\n\tExperience with automation, process improvement, and standardized access patterns for repeatable IAM and PAM delivery.\r\n\tFamiliarity with Zero Trust principles, especially identity as the control plane, continuous verification, conditional access, and privileged access protection.\r\n\tExperience working with architecture teams to create reusable implementation patterns, connection kits, and secure design standards.\r\n\tProject delivery experience, including proactively identifying, tracking, and closing risks, issues, dependencies, and action items.\r\n\tAbility to build trust and alignment across technical, business, security, and audit stakeholders while balancing security, usability, and operational needs.\r\n\r\n\r\n \r\n\r\nEducation and Certifications:\r\n\r\n\r\n\tCertifications related to identity and access management, privileged access management, cloud identity, or cybersecurity are considered an asset. Relevant certifications may include CyberArk, Delinea, SailPoint, Microsoft identity/security certifications, CISSP, CISM, CRISC, CCSP, ISO 27001, CompTIA Security+, ISC2 CC, or equivalent credentials.\r\n\tBachelor’s degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline, or equivalent practical experience.\r\n\tMicrosoft certifications related to directory services, cloud identity, Active Directory, Microsoft Entra ID, security, or identity are preferred.\r\n\r\n\r\n \r\n\r\nWhat We Offer at Maple Leaf Foods:\r\n\r\n\r\n\tBeing part of a high-performance, people-focused company that has an inspiring and unique vision to become the most sustainable protein company on earth, and a deep commitment to sustainable protein across North America.\r\n\tAn inclusive company culture and a work environment that keeps our people safe, rewards excellence, and empowers everyone to learn and contribute their best. \r\n\tCompetitive Health and Wellness benefits that offer flexibility to meet your individual or family needs, including programs focused on improving mental health and wellbeing. These benefits start on your first day of employment.\r\n\tDefined Contribution Pension Plan with company matching that starts on your first day of employment.\r\n\tLearning and development opportunities, including workshops, ‘speaker series’ events, and resources that allow you to develop your skills and progress your career.\r\n\tComprehensive tuition reimbursement program that supports continuous learning and development of our team members through investment in eligible degrees, diplomas, professional certification, or trades programs.\r\n\tSupporting our deep commitment to community impact, we offer up to two paid days annually to volunteer at a cause of your choice.\r\n\r\n\r\n \r\n