When applicable, Bombardier promotes flexible and hybrid work policies.

Why join us?

At Bombardier, we design, build and maintain the world’s peak-performing aircraft for the world’s most discerning people and businesses, governments and militaries. We have been successful in setting the highest standards by putting our people at the heart of it all, and defining excellence, together. We have an opportunity for individuals who thrive in a high-performance environment, where growth and development are encouraged and where you are empowered to reach your full potential on your own terms, because the best work happens when you are free to be yourself and share your unique expertise.

Bombardier’s Benefits Program

With our employees’ well-being top of mind, we offer a comprehensive and competitive Advantages Program, which includes the following:

- Insurance plans (Dental, medical, life insurance, disability, and more)
- Competitive base salary
- Retirement savings plan
- Employee Assistance Program
- Tele Health Program

What are your contributions to the team?

- Identity Architect - Act as the SME (Subject Matter Expert) for the identity technology stack, plan and prioritize the technology roadmap, track deployments.
- PKI (Public Key Infrastructure) Specialist - Own, develop and drive the current state and future state plan for PKI.
- Identity Threat Engineer/Specialist - Collaborate with the SOC (Security Operations Centre) to mature and enhance telemetry, processes and response to cyber threats.

How to thrive in this role?

- You hold a bachelor’s degree in cyber security, information security, computer science, or relevant field of study.
- You have over 6 years of experience with identity lifecycle management (Joiner/Mover/Leaver), access governance, and least‑privilege access models.
- You have a strong knowledge of authentication and authorization protocols (SAML, OAuth 2.0, OpenID Connect, LDAP, Kerberos).




- You have hands‑on experience with enterprise IAM (Identity & Access Management) platforms (e.g., Azure Entra ID, SailPoint, Okta, CyberArk, MFA).
- You have proven experience designing, operating, and evolving enterprise PKI (Public Key Infrastructure) environments (internal and public CAs).
- You have a strong understanding of certificate lifecycle management, TLS/SSL, and cryptographic trust models.
- You have experience securing non‑human identities such as applications, services, workloads, and APIs.
- You have experience with human identities in medium to high trust environments such as formal digital signature of documents and software.
- You are familiar with key management practices, HSMs (Hardware Security Modules), and cloud‑native key services.
- You have experience integrating IAM (Identity & Access Management) and PKI signals into SIEM/XDR platforms.
- You have a solid understanding of identity‑based attack techniques, including credential abuse, lateral movement, and privilege escalation.
- You have the ability to define identity‑centric detection use cases and collaborate with SOC (Security Operations Center) teams on response and remediation.
- You have experience securing hybrid and cloud environments (Azure, AWS, Google or partner clouds) using identity‑centric security patterns.
- You possess scripting and automation skills (PowerShell, Python, REST APIs) to reduce manual effort and operational risk.
- You have a strong architectural mindset with the ability to translate business requirements into scalable, secure identity solutions.
- You are familiar with Zero Trust principles and modern identity‑first security architecture.

Bombardier is an equal opportunity employer and encourages persons of any race, religion, ethnicity, gender identity, sexual orientation, age, immigration status, disability or other applicable legally protected characteristics to apply.

Job

Cyber Security IAM & PKI Specialist

Primary Location

Administrative Centre (CA)

Organization

Aerospace Canada

Shift

Employee Status

Regular

Requisition

11313 Cyber Security IAM & PKI Specialist

📌 Cyber Security IAM & PKI Specialist (Dorval)
🏢 Socket.dev
📍 Dorval