The IAM Solutions Architect will play a key role in a dynamic, fast-paced environment at one of North Americas leading airlines. Air Canada is investing heavily in advancing its Identity and Access Management (IAM) capabilities through process maturity and cutting-edge technology. In this role, the architect will design, implement, and enhance IAM and Identity Governance Administration (IGA) solutions, serving as a cornerstone of the organizations security and access strategy. Success in this position requires close collaboration across IT, cybersecurity, and business leadership to deliver scalable, resilient, and secure IAM services that support our enterprise environment.

The primary responsibility of the IAM Solutions Architect will be to help advance Air Canadas organizational performance by maturing and continuously improving Air Canadas IAM practice and processes.

Develop and communicate IAM objectives; inspire, motivate and train team members to follow and achieve organizational IAM standards.Lead the architecture and design of IAM solutions across all phases, from requirements gathering to production deployment and ongoing support.Analyze business processes and workflows and recommend IAM solutions that promote enterprise security and operational efficiency.Oversee configuration, customization, and integration of Air Canadas IAM/IGA platform with a wide variety of applications and systems.Implement and maintain identity lifecycle management, user provisioning/deprovisioning and access certification processes.Lead architecture reviews, health checks, and technology assessments to identify and address gaps or opportunities for IAM improvements.Drive adoption of IAM best practices, standards, and procedures to ensure compliance with internal controls, regulatory requirements, and security frameworks.Provide subject-matter expertise and guidance to project teams, technical staff, and business users while working cross-functionally with security, networking, and application teams.Troubleshoot complex IAM related technical issues and optimize performance and scalability.Produce architectural documentation, implementation plans, and technical operating procedures.Build relationships throughout the organization to enhance and support focus on safe, secure, and reliable operations.Stay current with IAM trends and advancements, participating in continuous improvement initiatives for the organizations identity governance program.Maintain up-to-date understanding of IAM processes, principles, best practices, and technologies.

Bachelors degree in computer science, Information Systems, or related field, and/or relevant experience commensurate to the role.8-10 years of experience specifically designing and implementing IAM solutions in large companies, with at least 3+ years of SailPoint IdentityIQ (IIQ) architect-level work (version 8.x preferred).Deep expertise in SailPoint IIQ concepts, including directory services integration, user provisioning and lifecycle management, approval workflows, and access reviews.Expertise with RBAC (Role-Based Access Control) and SOD (Segregation of Duties) concepts.Experience with enterprise directories (Active Directory, LDAP), modern authentication protocols and concepts (SAML, OAuth, OpenID, SCIM, MFA, SSO, etc.), and cloud-based IAM integrations (Azure, AWS) is a strong asset.Demonstrated experience with programming/scripting languages (Java, PowerShell, JavaScript, C, .NET, Python) for IAM solution customization and automation tasks.Strong diagramming skills to clearly communicate system architecture and integration flows, using professional tools (e.g., Visio, Lucidchart, diagrams.net) for architectural, workflow, and use-case documentation.Experience leading large, multi-phase IAM/IGA projects from architecture through production go-live.Strong analytical, problem-solving, and project management skills, with the ability to communicate complex technical concepts to both business and technical stakeholders.Strong interpersonal skills with the ability to effectively present information.Demonstrated teamwork and leadership with the ability to mentor junior staff and work across functional groups.Demonstrated ability to work effectively under pressure and in rapidly changing environments or uncertainconditions.Knowledge of compliance, audit, and risk principles relevant to IAM and Identity Governance.Experience integrating with additional IAM or privileged access solutions (e.g., CyberArk, PingFederate) is a plus.Demonstrate punctuality and dependability to support overall team success in a fast-paced environment.

Prior experience in the aviation industry.CISSP or equivalent certification.SailPoint professional certification.Familiarity with DevOps pipelines and CI/CD best practices for IAM solution delivery.Experience delivering IAM solutions in hybrid or cloud-native environments.

Hybrid working conditions (4 days in office / 1 day remote).After hours on-call support for escalations.Ability to travel and work effectively with remote teams.

Candidates must be eligible to work in the country of interest, at the time any offer of employment is made and seeking any required work permits/visas or other authorizations which may be required is the sole responsibility of the candidates applying for this position.

Diversity and Inclusion

As an equal opportunity employer, we welcome applications from all to help us build a diverse workforce which reflects the diversity of our customers, and communities, in which we live and serve.