Administrator, Client Service Delivery

Date: October 16, 2026

Location: Mississauga, ON – Hybrid

Requisition ID: 21342

Status: Regular

Business Unit: Information and Technology Services

Grade/Band: 62

Shift Work:

Annual Pay Range: For standard 35-hour work week

Step 1: $104,516.36 to Step 3: $111,187.44

The successful candidate will be placed at the appropriate step within the salary grade/band, based on relevant years of experience and other applicable considerations.

Why join us?

The IESO is committed to ensuring Ontario’s electricity system meets the province’s needs today and into the future. We are charged with purpose, delivering reliable, affordable, and sustainable electricity for homes, businesses, and communities across the province. We are energized to grow, embracing opportunities to shape the future of a dynamic and evolving energy sector while advancing our careers. We are powered by teamwork, supported by diverse and passionate colleagues who foster respect, celebrate successes, and thrive on shared achievements. At the IESO, it’s not just what we do—it’s who we are!

Who we are

Our central role includes managing the provincial power grid in real-time, overseeing and evolving Ontario’s electricity market, engaging with government, municipalities and Indigenous communities, and planning for Ontario’s future electricity needs. Our employees play a key role in driving grid innovation, protecting the system from threats, advancing the province’s energy conservation programs, and forecasting and procuring the electricity resources we’ll need in the decades to come.

This is a unionized position that falls within the IT Operations Division in the Information and Technology Services Business Unit.

What makes this role exciting

The energy sector is rapidly evolving, offering exciting new opportunities for those who want to make a difference.

• The Administrator, Client Service Delivery is a technical role responsible for administering and supporting enterprise services, including user provisioning and de-provisioning, Active Directory, Okta, Single Sign-On (SSO), multi-factor authentication (MFA), and access management across critical business systems. The role also troubleshoots access-related issues, supports application integrations and automation initiatives, and ensures secure, reliable, and efficient access to organizational resources.

What you’ll do

In this role, you’ll make a meaningful impact by contributing to the IESO team and supporting the electricity needs of the province through:

• Processing access requests (creating, maintaining, and removing user accounts to various systems and ensuring the right level of access at the right time). This is done by accepting or revoking requests via email from IESO staff and creating tickets to manage and fulfill access to IESO systems, including Bulk Energy Systems (BES), non-BES systems, Active Directory, databases, and email resources (e.g., shared mailboxes, public folders, distribution lists). Working under established guidelines, policies and procedures, this position ensures access is provisioned and de-provisioned to enterprise applications and services.
• Onboarding new hires by provisioning network and system credentials and introducing them to IESO systems. Includes cross-boarding and person access requests using tools such as Active Directory and Exchange Online, ensuring timely and accurate account creation and removal in accordance with established guidelines, policies, and procedures. This is an active, hands-on position, responsible for the support, and administration of identity and access management functions and components of various applications.
• Managing external-facing system access for Market Participants, including administration of grant/revoke processes.
• Assigning and un-assigning RSA tokens, educating users on token setup and login procedures.
• Executing off-boarding procedures for employee departures, including rapid exits, to ensure compliance with NERC and other defined obligations.
• Assigning security levels and permissions to user accounts as required by other IT support groups. Administer and support the enterprise identity management and governance solutions and serviced including critical identity services such as the identity lifecycle, multi-factor authenticaservices, OKTA (Gateway), and single sign-on (SSO) services.
• Participate in application integration activities for identity management solutions.
• Participate in improvements to identity and access management processes and services via identity management solutions, cross functional team collaboration, or related business process change.
• Add, change, and delete user access; maintain systems, applications and/or review and update of documentation associated with identity and access management.
• Working with staff at various levels including leaders to ensure grant/revoke procedures continue to meet regulatory requirements and other obligations.
• Periodically updating access-related documentation, such as System Permission Group Matrix and Grant/Revoke Procedures and filing documents generated by other business units as necessary.
• Maintaining automation scripts to support repetitive access provisioning and de-provisioning tasks.
• Supporting KPI tracking for core IAM procedures (grant/revoke, add/change/remove person processes).
• Attending job-specific training as required and requested by Supervisor, Access Management.
• Providing support on IT projects as required and day-to-day support of the Identity and Access Management program.
• Participating in the NERC and CSAE3416 audits by providing relevant information that supports the grant/revoke and access permissions review processes.
• Generating and reviewing access permission reports at various frequencies (quarterly, bi-annually, annually) to ensure regulatory compliance.
• Managing RSA token lists on a quarterly basis.
• Updating internal resources, such as the phone list, monthly.
• Ensuring user emails licenses are appropriately assigned when legal holds are requested and reconciled with acquired licenses.
• Storing email files of staff upon departures by uploading to network drive when requested.
• Assisting in the testing, integration and onboarding of new applications and services as well as upgrades to the current IAM Solution.
• Adhering to all security practices and procedures to safeguard company resources.

In a typical day, you will

• Review user accounts by obtaining a list of new hires and terminated staff and delivering quick and easy to read reports for steward reviews to ensure all procedures are followed.
• Working with various users to explain the requirements and provide guidance as needed.
• Monitoring access requests to ensure timely fulfillment and assisting in governance of system and user ID management procedures.
• Work with team members and supervisor to design improved systems and processes for efficiency and automation.
• Other duties as assigned.

Role Requirements

Our team consists of experts from diverse backgrounds, each bringing their unique perspectives and skills.

To succeed in this role, you’ll need:

Education:

Requires a knowledge of:

• Enterprise directory and directory integration services (e.g., Active Directory, Azure Active Directory, LDAP, PKI), (e.g. Conditional Access, SSO, and Graph API), Exchange Online, and PowerShell.
• Identity lifecycle management, multi-factor authentication (MFA), OKTA Gateway and single sign-on (SSO).
• Administration and support of identity management solutions, related processes and tools.
• Advanced MS Excel skills and experience with basic relational databases (e.g. MS Access, MySQL, etc.) for data analytics and reporting.
• Working knowledge or familiarity with O365 (Exchange), DB Query/Tableau, Cherwell, OKTA, JIRA/Tosca, PowerShell/Scripting, Agile, Project Management, RSA token, Azure, Python.
• Ability to read and understand technical documentation such as job documents, position access documents, procedural manuals, and system guides.
• Proficiency in developing procedural guides, user instructions, emails, and documentation related to access management.
• Experience in hardware/software troubleshooting and system support, including installation and issue resolution.
• This knowledge is considered to be normally acquired in either a Grade XII education in a secondary school plus Associate/vocational/technical degree in an information technology field undertaken through Business School, Trade School, Vocational Centre, College of Applied Arts and Technology, Institute of Technology, Polytechnic Institute etc. earned over a period of 1 to 2 years.

Experience:

• Requires experience in implementing functionality provided by identity management solutions, enterprise directory services, and access management solutions.
• Requires experience to understand critical systems and their functionality, prioritize workflow, and determine solutions.
• Requires experience in the use of tools to perform data analysis to drive service improvement.
• Requires strong troubleshooting skills in areas of user connectivity, password management, and permissions.
• Requires strong communications skills (written and verbal) to be able to work with technical and non-technical team members.
• Experience managing user data in relational databases and using scripting tools such as PowerShell.

How We Support You

From a comprehensive total rewards program to dynamic learning and development opportunities—including job rotations to broaden your expertise—we empower you to define and shape your own success. When you join the IESO, here’s what you can expect:

• Best-in-class benefits and long-term support in the form of a defined benefit pension plan.
• Work in a dynamic and evolving sector that offers exciting opportunities and the chance to explore new career paths.
• Leadership that values meaningful discussions, welcomes feedback, and prioritizes career development.
• A strong, inclusive culture and a collaborative team environment with a shared passion for impactful work.
• Compensation packages that are regularly reviewed to remain competitive and to best accommodate the diverse needs of our employees.

Deadline: October 30, 2026 at 11:59PM

For future reference, please save a copy of the job posting as it will no longer be available once the posting closes.

Thank you for your interest in a career at the IESO. Only candidates selected for an interview will be contacted. Please note that the successful candidate must be legally eligible to work in Canada and will be subject to applicable background checks.

IESO will not conduct interviews or offer positions via online, text, chat or social media platforms. We will not gather personal information directly from candidates or potential candidates. Selected candidates will work with our Talent Acquisition team to ensure their application is processed.

The IESO currently has a 3-day in-office work week for applicable roles. Over the course of 2026, the IESO will advance plans to acquire additional office space to accommodate more in-office time. While the timeline for moving to a full 5-day in-office model has not yet been established, we are committed to keeping employees and candidates informed as plans progress and give them as much advance notice as possible to prepare for any changes.

We believe in opportunities for everyone.

At the IESO, we know that achieving great results depends on embracing diversity by attracting, developing, and retaining people from a wide variety of backgrounds. We do this by ensuring our recruitment and advancement policies are fair and equitable, and by creating an accessible and inclusive environment—one that values every team member’s unique skills and experiences and ensures they have the support they need to achieve their potential. If you require accommodation during the recruitment process, please let us know. We’re proud to say we’ve been recognized as a supportive, inclusive employer.

Be sure to follow us on LinkedIn.