Sr. Access Control Specialist

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

About the job:

The Senior Access Control Specialist is a key member of Sun Life's Identity and Access Management (IAM) team, responsible for the administration, engineering, support and continuous improvement of enterprise authentication and access management solutions.

The role provides technical expertise across authentication technologies, including Okta MFA, Okta OAuth and Transmit Security MFA, ensuring secure, reliable and highly available authentication services across the enterprise.
The Specialist plays a critical role in maintaining platform stability and security while supporting incident management, change implementation, platform upgrades, integrations and operational excellence.

This role is ideal for an Experienced Identity and Access Management (IAM) Professional, with a strong background in authentication technologies and who is passionate about designing secure, scalable and resilient solutions and support operational excellence across the enterprise ecosystem.

What will you do?

Operational Support & Administration:

• Provide day-to-day operational support for Okta MFA, Okta OAuth, and Transmit Security MFA platforms.

• Monitor platform health, availability, performance, and service levels.

• Investigate and resolve incidents, service requests, and authentication-related issues.

• Support production and non-production environments.

• Perform user and administrator access management activities.

• Participate in on-call support and critical incident response when required.

• Maintain operational runbooks, support procedures, and knowledge articles.

Platform Engineering:

• Design, configure, and implement authentication and authorization solutions.

• Develop and maintain OAuth/OIDC integrations for applications and APIs.

• Implement MFA policies, adaptive authentication controls, and access governance requirements.

• Support new application onboarding to Okta and Transmit Security platforms.

• Configure identity federation, SAML, OAuth 2.0, OpenID Connect (OIDC), and API security controls.

• Automate operational activities using APIs, scripting, and workflow automation.

Security & Compliance:

• Ensure authentication platforms comply with security standards and regulatory requirements.

• Participate in audit requests and evidence collection.

• Support vulnerability remediation activities.

• Review authentication controls and access policies.

• Implement security best practices across MFA and OAuth services.

• Plan, implement, and validate platform changes and upgrades.

• Participate in change management and CAB processes.

Stakeholder Engagement:

• Work closely with application owners, infrastructure teams, security teams, and vendors.

• Provide technical guidance and support to project teams.

• Assist with platform roadmaps, modernization initiatives, and strategic improvements.

What do you need to succeed?

• 5+ years in Identity and Access Management (IAM).

• 5+ years administering enterprise MFA platforms.

• Experience supporting Okta MFA and OAuth services.

• Experience administering Transmit Security MFA or similar CIAM platforms.

• Experience supporting business-critical authentication services in production environments.

• Strong troubleshooting and incident management experience.

• Experience with change, release, and problem management processes.

• Preferred skills:
  - Okta MFA and OAuth Administration.
  - Platform Engineering and Automation.
  - Active Directory.
  - Postman/Bruno, REST API.
  - MFA or CIAM Platforms.

Unique Requirements:

This role requires Reliability Status Clearance. In addition to a law enforcement inquiry and a credit check, as part of your application, the Government of Canada will ask if you lived or travelled outside of Canada for 6-consecutive months during the last 5 years, and you must account for all activities during this time.

What’s in it for you?

• Being a member of the Sun Life family, a group of people united by our Purpose: to help Clients and Employees achieve lifetime financial security and live healthier lives.

• An environment of continuous learning, development, and improvement.

• Internal mobility is supported by leaders who are dedicated to fueling your professional growth.

• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [email protected].

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

Job Category:

Posting End Date: