Job Description Metrolinx is connecting communities across the Greater Golden Horseshoe. Metrolinx operates GO Transit and UP Express, as well as the PRESTO fare payment system. We are also building new and improved rapid transit, including GO Expansion, Light Rail Transit routes, and major expansions to Toronto’s subway system, to get people where they need to go, better, faster and easier. Metrolinx is an agency of the Government of Ontario.

At Metrolinx, equity, diversity and inclusion are essential to living our values of serving with passion, thinking forward and playing as a team.

Metrolinx's Innovation and Information Technology group supports female team members via "Go Tech Women" an affinity group for women in Information Technology, led by our Chief Information Officer.

If you enjoy technology and innovation, value diversity, appreciate work/balance and are looking for an opportunity to make a better world via public service, Metrolinx would like to hear from you!

What will I be doing?

• Implement and support centralized Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions in collaboration with I&IT project teams.
• Conduct and facilitate access provisioning reviews to ensure appropriate access levels.
• Drive continuous improvements in Privileged Access Management (PAM) processes and tools.
• Participate in incident response activities related to IAM when required.
• Maintain and update Key Performance Indicator (KPI) reports to track IAM maturity and effectiveness.
• Perform compliance reviews to ensure IAM configurations align with internal security policies and standards.

What Skills and Qualifications Do I Need?

• Proven experience with Identity Management systems Entra ID and Active Directory environments.
• Strong understanding of cloud platforms, including SaaS and IaaS models.
• Foundational knowledge of Linux and Unix operating systems.
• Experience with network infrastructure and architecture.
• Familiarity with Identity Governance automation tools such as Sailpoint and Saviynt.
• Proficiency in PowerShell and Kusto Query Language (KQL) for scripting and querying.
• Security certifications such as CISSP, CRISC, CISA, or similar are considered strong assets.
• Additional certifications like Certified Access Management Specialist (CAMS), Microsoft Certified: Identity and Access Administrator Associate, or Windows Administration are advantageous

Don’t Meet Every Requirement? If you’re excited about working with Metrolinx but your past experience doesn’t quite align with every qualification of this posting, we encourage you to apply. You just might be the right candidate for this or other roles. We are always looking for great talent to join our team.

We invite all interested individuals to apply and encourage applications from members of equity-deserving communities, including those who identify as Indigenous, Black, racialized, women, people with disabilities, and people with diverse gender identities, expressions and sexual orientations.

Accommodation We value the unique skills and experiences each person brings to Metrolinx and are committed to creating and maintaining an inclusive and accessible environment. We are committed to the requirements of the Accessibility for Ontarians with Disabilities Act so if you require accommodation during the hiring process, please let our Recruitment team know by contacting us at: 416-202-5601 or email hr.recruitment@metrolinx.com .

Application Process All applicants must be legally entitled to work in Canada. Metrolinx will be using email to communicate with you for all job competitions. It is your responsibility to include an updated email address that is checked daily and accepts emails from unknown users. As we send time-sensitive correspondence, we recommend that you check your email regularly. If no response is received, we will assume you are no longer interested in pursuing the opportunity. Please be advised that a Criminal Record Check may be required of the successful candidate.

For Internal applicants, with the recent implementation of the Internal Mobility Policy, the internal recruitment process has changed for non-union roles. Candidates must be in their current role for 12 months prior to applying for another role and each applicant must be in good standing (not participating in a Performance Improvement Plan). Please review all provisions of the policy before submitting your application.

Should it be determined that any background information provided is misleading, inaccurate or incorrect, Metrolinx reserves the right to discontinue with the consideration of your application.

We thank all applicants for their interest, however, only those selected for further consideration will be contacted.

WE ARE AN EQUITABLE AND INCLUSIVE EMPLOYER.