Overview
We are looking for a Data Analyst specializing in Identity & Access Management (IAM) to transform identity, access governance and authentication data into meaningful insights and actionable recommendations. This role combines data analytics, dashboard development, control reporting and hands-on support for IAM operations.
You will collaborate with Identity Management, Cybersecurity, Technology, Risk, Internal Audit and business stakeholders to identify trends, anomalies and control gaps across the identity lifecycle. Your work will strengthen access governance, improve reporting accuracy, support audit readiness and enable evidence-based decisions related to identity and access controls.
Primary Location: Toronto, ON
Work Model: Hybrid 4-Days Onsite
Employment Type: Contractor
RESPONSIBILITIES:
- Collect, cleanse, reconcile and analyze data from SailPoint, Microsoft Entra ID, Active Directory, authentication platforms, service management tools and other authoritative sources
- Analyze authentication activity, including MFA adoption, failed sign-ins, passwordless usage, legacy authentication, account lockouts, risky sign-ins and Conditional Access outcomes
- Identify unusual access patterns, data-quality concerns and potential control gaps, translating findings into practical recommendations
- Develop repeatable analytical models, data definitions and quality checks for identity lifecycle, access governance, privileged access and authentication services
- Validate data completeness, accuracy and timeliness, including duplicated records, orphaned identities, uncorrelated accounts and inconsistent entitlement or application metadata
- Design, build and maintain Power BI dashboards and scorecards for IAM operations, authentication health, access governance, certification progress and control effectiveness
- Create semantic models, DAX measures, drill-through views and audience-appropriate visualizations
- Automate recurring reports using Power BI, Power Query, APIs, SQL and scripting
- Define reporting ownership, refresh schedules, access controls, data lineage, quality thresholds and supporting documentation
- Prepare monthly and quarterly management reporting covering key trends, emerging risks, remediation progress and operational bottlenecks
- Support quarterly user, privileged, application and entitlement access reviews using SailPoint and related data sources
- Prepare access-review populations, reconcile identities and entitlements, validate reviewer assignments and test campaign data before launch
- Track campaign completion, overdue decisions, revocations, exceptions and remediation evidence
- Produce reviewer guidance, progress dashboards, certification summaries and audit-ready evidence packages
- Assist with SailPoint data, access certifications, identity lifecycle events and application onboarding activities
- Support analysis related to access requests, provisioning, deprovisioning, birthright access, service accounts, shared accounts and role-based access controls
- Monitor and troubleshoot IAM-related incidents, requests and data-processing failures, coordinating with additional support teams when required
- Collaborate with IAM engineers, application owners and technology teams to validate connector outputs, account aggregation, identity correlation and entitlement metadata
- Provide reports, metrics and supporting evidence for audits, risk assessments, control testing and management inquiries
QUALIFICATIONS, SKILLS & EXPERIENCE:
- Bachelor’s degree in Data Analytics, Computer Science, Information Systems, Cybersecurity, Engineering, Mathematics, Statistics or a related discipline, or an equivalent combination of education and relevant experience
- At least 3 years of experience in data analysis, business intelligence, cybersecurity analytics, Identity & Access Management or a related technology role
- Hands-on experience developing Power BI dashboards using Power Query, data modelling and DAX
- Experience managing Power BI refreshes, workspaces and appropriate access controls
- Hands-on experience with SailPoint IdentityIQ or Identity Security Cloud
- Experience working with SailPoint identities, accounts, entitlements, access requests, certifications, roles, aggregation and reporting data
- Working knowledge of Microsoft Azure and Microsoft Entra ID data, including sign-in logs, audit logs, Conditional Access, MFA and authentication-method reporting
- Practical understanding of authentication and federation methods such as passwords, MFA, passwordless authentication, FIDO2, passkeys, Windows Hello for Business, certificates, SAML, OAuth 2.0, OpenID Connect, LDAP and SCIM
- Experience using PowerShell, Python or SQL to extract, transform, validate or automate data and reporting
- Experience supporting access reviews, audit evidence, security controls, data reconciliation or regulated control processes
- Ability to investigate data discrepancies, perform root-cause analysis and distinguish data-quality issues from control exceptions
- Ability to communicate analytical findings clearly to technical and non-technical stakeholders
NICE TO HAVE:
- Experience with Microsoft Graph, Azure Monitor, Log Analytics or Kusto Query Language
- Familiarity with Microsoft Sentinel, Microsoft Fabric, Dataverse or data-lake technologies
- Experience with ServiceNow or similar IT service management and workflow platforms
- Knowledge of privileged access management, data access governance, cloud identity and Zero Trust principles
- Familiarity with phishing-resistant authentication programs
- Microsoft Certified: Power BI Data Analyst Associate certification
- Microsoft identity or security certifications
- SailPoint certifications
- Relevant IAPP or ISACA credentials
ABOUT ADASTRA
Adastra is a global leader in AI and data-driven transformation, helping organizations lead with artificial intelligence - responsibly, strategically, and at scale. With over 25 years of experience, Adastra empowers enterprise clients to unlock business value through data innovation, operational excellence, and smart customer engagement.
Trusted by some of the world’s most prominent brands, Adastra delivers end-to-end solutions grounded in thoughtful strategy, robust governance, and deep technical expertise. From defining vision to ensuring execution, Adastra guides organizations through every stage of their AI, data and cloud journey - building future-ready capabilities and delivering measurable, lasting impact.
Adastra serves clients across key industries including financial services, automotive, manufacturing, technology, media and telecom (TMT), healthcare, retail, and professional services. The company employs more than 2,000 professionals across North America, Europe, and Asia.
WHAT WE OFFER
- Opportunity for advancement and career progression
- Competitive compensation
- Successful referral program
- The opportunity to work with one of Canada’s 50 Best Managed Companies
- Satisfaction of working for a reputable company
- A flexible, dynamic, and diverse workplace
EQUAL OPPORTUNITY EMPLOYER
In our commitment to promote fair and equitable treatment of all employees and applicants, Adastra Corporation provides equal employment opportunities for all individuals regardless of age, sex, disability, race, ethnic origin, citizenship, creed, sexual orientation, marital status, or any other ground as described in the Ontario Human Rights Code. In addition, accommodation will be provided during the hiring process. Adastra Corporation’s implementation and support of employment initiatives, encourage diversified labour force participation and equal access to opportunities based on merit and performance.
AI Usage - Our hiring process includes the use of AI-enabled tools to screen applications (e.g., keyword matching, qualification ranking). A human recruiter reviews all AI-generated shortlists to make informed hiring decisions.
There has been an increased instance of fraudulent job offers coming from people posing as Adastra HR employees. Please note that Adastra will never request fees as part of our recruiting process and any emails sent to you that are not from ‘@adastragrp.com’ or ‘@talent.icims.com’ are fraudulent. All employment offers are sent via DocuSign and if you receive an employment offer from a suspicious email and not via DocuSign, it is fraudulent.
Contact careers@adastragrp.com to inquire about jobs at Adastra, to report a suspicious request for money or personal information from external websites or suspicious employment offers.
