Building the space between proven and possible, MDA Space (TSX:MDA) is a trusted mission partner to the global space industry. A robotics, satellite systems and geointelligence pioneer with a 55-year+ story of world firsts and more than 450 missions, MDA Space is a global leader in communications satellites, Earth and space observation, and space exploration and infrastructure. The MDA Space team of more than 3,800 space experts in Canada, the US and the UK has the knowledge and know-how to turn an audacious customer vision into an achievable mission – bringing to bear a one-of-a-kind mix of experience, engineering excellence and wide-eyed wonder that’s been in our DNA since day one. For those who dream big and push boundaries on the ground and in the stars to change the world for the better, we’ll take you there.

Job Details MDA Space is seeking a Senior Identity Access Management Analyst to join the Identity and Configuration Management Team. You will be responsible for leading the design, implementation, and maintenance of a secure effective IAM program to mitigate information security risks while enabling the business growth initiatives. You will work closely with other members of the IT team and developers to ensure that user access to company systems and data is controlled, monitored, and audited appropriately. You will be responsible for identity lifecycle, implementing a PAM (Privileged Access Management) solution and designing RBAC (Role-Based Access Control) principles.

The position requirement is to provide technical leadership managing central directory services – Microsoft Entra ID and Active Directory, Privileged Access Management (PAM), Multi-Factor Authentication (MFA). Configuring applications and services with the company SSO solution. Managing PKI is a requirement. Strong knowledge of Configuration Management tools such as Intune, SCCM and Puppet is needed to enforce compliance and OS hardening of Windows and Linux platforms against CIS standards.

In this role, your duties will include leading various projects to support MDA Space business initiatives, analyzing and implementing appropriate Identity configuration that aligns with the organization cyber security and governance policies. You will be required to implement and maintain OS Windows and Linux CIS hardening templates.

Job Responsibilities

• Lead projects related to Identity Access Management, Certificate management, and configuration standards of systems to support business initiatives.
• Administer hybrid identity environment leveraging Microsoft Entra ID, Active Directory, Okta
• Configure SSO for enterprise applications using Okta
• Design, implement, document and manage a comprehensive Identity and Access Management program that covers all aspects of user access to company systems and data, including RBAC and PAM.
• Work with other members of the IT team to define and implement, maintain access control policies, procedures and standards based on cyber security, regulatory and compliance requirements.
• Architect and manage the entire identity lifecycle, including user on-boarding, off-boarding and modifications based on user role changes.
• Architect and administer services for centralized authentication, MFA and SAML based authentication mechanisms.
• Implement and manage PAM to secure and manage privileged accounts.
• Audit access rights to ensure that access is granted based on business need and in accordance with company policies.
• Automate IAM tasks using scripting languages such as PowerShell or Python to improve efficiency and reduce manual errors.
• Develop and maintain procedures related to the administration and management of user accounts, naming standards, certificate management and other integrations of IAM systems.
• Maintain up-to-date knowledge of regulatory requirements and industry best practices related to IAM, PAM, and RBAC to ensure that MDA Space is fully compliant.
• Be a part of Incident Response team, and respond and investigate security incidents related to user access to company systems and data
• Work with auditors to provide evidence of compliance with regulatory requirements for CSOX and CMMC related to IAM, Certificate management, and system configuration management.
• Leverage configuration management tools such as Active Directory GPOs, Intune, SCCM, Puppet to ensure systems are configured and maintained centrally in accordance with company cybersecurity settings.
• Leverage the knowledge of Azure and Intune to setup appropriate conditional policies that align to company’s security and compliance requirements.
• Manage MDA Space PKI
• Participate in design and architecture reviews as a subject matter expert in the IAM discipline; identify and conduct detail assessments of emerging IAM initiatives.

Job Required Qualifications

• A Bachelor’s degree with studies focused on information technology or cyber security
• Must have 7+ years of experience and current working knowledge in identity management, access management, privileged access management, encryption and certificate management
• Excellent communication, interpersonal, presentation, and technical skills to tailor content for the business audience.
• Extensive knowledge and experience with IAM systems such as Microsoft Entra ID, Microsoft Active Directory, Okta is required.
• Extensive knowledge of Windows and Linux systems and configuration management tools such as AD GPO, Intune, SCCM, Puppet
• Strong knowledge and experience managing PKI and the automation of certificate life-cycle management.
• Strong understanding of SSO standards such as SAML, OIDC and OAuth
• Strong scripting skills in PowerShell and other scripting languages such as Python.
• Experience with automation, API integration and scripting of IAM related tasks.
• Extensive knowledge and working experience of the identity lifecycle management process, including user on-boarding, off-boarding and account modifications.
• Good knowledge of industry standards and compliance frameworks such as NIST and CIS.

Comments/Special Considerations Successful candidates must obtain and hold security clearance at the reliability status level, and pass security assessment for the Controlled Goods Program (CGP) and ITAR. MDA provides competitive compensation and benefits packages for its employees at all locations. As a team member of MDA, you and your qualified dependents are eligible to participate in a benefit plan that ensures a comprehensive level of protection through competitive health care including; extended healthcare and flexible drug plans, dental and vision benefits, disability income protection, life insurance, group retirement savings plans; and an employee and family assistance program.

MDA is an equal opportunity employer prizing diversity and inclusion. We are committed to treating all employees and applicants for employment with respect and dignity. If you require assistance and/or reasonable accommodation due to a disability during the application or the recruiting process, please feel free to notify us.

The compensation range for this position is $100,000-125,000 annually. The specific compensation offered will be based on the qualifications and experience of the successful candidate.

#MDA