Specialist Identity and Access Management

Specialist Identity and Access Management

At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely and our employees can focus on value-added tasks. You will be able to develop your skills and career in our close-knit, safety-focused culture working together as ONE TEAM. The careers we offer are meaningful because the work we do matters. Join us

Job Summary

The Specialist Identity and Access Management (IAM) acts as a subject matter expert and provides guidelines on integration of new solutions into the IAM practice and tools. The Specialist IAM will review existing processes and identify opportunities for improvement. This person will coordinate initiatives and projects for the team, working with internal and external partners.

Main Responsibilities

Process Management and Subject Expertise

• Provide subject matter expertise in the IAM domain.

• Organize committee meetings with stakeholders within the domain.

• Ensure IAM policies, standards and procedures for IAM are followed.

• Produce measures/metrics for the function.

• Ensure that auditing procedure and audit reports are executed.

• Review and assess operational processes to identify opportunities for improvement related to provisioning/de-provisioning, privileged access management, authentication/authorization, etc.

• Standardize IAM processes and ensure alignment of IAM processes to the IAM policies and standards.

• Develop, review and maintain strategic and tactical IAM initiatives to reduce risk, increase usability and operational effectiveness.

• Lead and provide guidance in implementing complex IAM projects. Project management includes prioritization of activities, defining objectives, milestones and overall ensure successful on-time implementation and deployment.

• Transition projects to core operations.

• Handle all core, project and change requests within the domain; prioritize, analyze requests and engage required teams.

• Execute Identity lifecycle (Hiring, Change, Leave) within the domain.

• Work with stakeholders to gather requirements needed for new system and application integration within IAM.

• Control, monitor, and audit privileged access to systems and applications.

Working Conditions

This role will require off-hour support on a rotational basis.

Requirements

Experience

• Minimum 7 years of relevant work experience

§ Minimum 5 years experience in Identity and Access Management

§ Experience of railway industry

§ Work experience within the IAM domain using a Central Identity & Access Management tool such as IBM Security Identity Manager (ISIM), Sailpoint or Saviynt.

Education/Certification/Designation

• Bachelor’s degree in Computer Science, Information Systems or other related field, or equivalent work experience

• ITIL Management framework – Identity and Access Management.*

*Any designation for these above would be considered as an asset

General Skills and Competencies

• Ability to organize

• Ability to solve problems in innovative ways

• Collaborate as ONE team: build collaborative relationships with others

• Communicate effectively both orally and in written: adapt to the audience

• Ability to think and act under pressure

• Demonstrate an analytical mindset

• Communicate effectively both orally and in written (French and English).*

*Any skills/attributes for these above would be considered as an asset

Technical Skills/Knowledge

· In Depth Knowledge of privileged access management solution, preferably CyberArk.

· In Depth Knowledge of identity management solutions, preferably Saviynt

· In Depth Knowledge of SSO solutions

· In Depth Knowledge of Active Directory

· In Depth Knowledge of Azure and Google Cloud

· In Depth Knowledge of Conditional Access

· Able to script (Python, PowerShell)

· Working knowledge of ServiceNow

· Knowledge of PKI Management

· Knowledge of Windows/Unix environments

· Detail-oriented self-starter with a high level of commitment and personal motivation

· Team player with great collaboration spirit

· Knack for prioritizing tasks and working in a fast-paced environment.

· Identity Federation and Privileged Access Management

· Knowledge of security in Windows Active Directory, Unix, IDM, Mainframe (ACF2, CICS, Natural) and/or other operating systems

· Knowledge of corporate organization structure: operational environments & processes

Organizational Impact

Decision Making & Impacts

The Specialist Identity and Access Management is a key player within I&T, controlling the quality of technology and service delivered into production.

The Specialist Identity and Access Management make recommendations to the business and I&T team members to assist in decision making (including during projects).

Level of Interaction/Influence

The Specialist interfaces directly with many key stake holders of the organization such as: Change Management, Release Management, Build and Operations Teams, Business and End User, Process Managers and Analysts, Application Support teams, Information Security, Internal Audit and Human Resources.

About CN

As a leading North American transportation and logistics company, CN is a true backbone of the economy. With a team of approximately 25,000 railroaders, our focus is on moving both our company and the economy forward. We transport US$200 billion worth of goods annually for a wide range of business sectors from resource to manufactured products to consumer goods, across a 20,000-mile network spanning Canada and mid-America. CN is the only Canadian company listed in the Transportation and Transportation Infrastructure sector of the Dow Jones Sustainability World Index (DJSI). Launched in 1999, the DJSI World represents the gold standard for corporate sustainability. At CN, we work as ONE TEAM, focused on safety, sustainability and our customers, providing operational and supply chain excellence to deliver results.

For internal candidates, note that the grade level of the position will depend on the employee's experience.

CN requires that all employees be fully vaccinatedagainst COVID-19 and provide proof thereof as a condition of employment. TheCompany’s vaccination mandate extends to employees of our wholly ownedsubsidiaries as well as CN’s contractors, consultants, agents and suppliers andanyone who accesses CN properties in Canada.

CN is an employment equity employer and we encourage all qualified candidates to apply. We thank all applicants for their interest, however, only candidates under consideration will be contacted. Please monitor your email on a regular basis, as communication is primarily made through email. 

FAQ
Check here for answers to your CN hiring questions. Applying for a Job at CNDoes CN offer entry-level positions?

Yes, we have many positions ranging from entry to senior levels, both in the field and in corporate and IT functions. All available positions are posted onto our Careers website.

Does CN hire students, interns, and new graduates?

Yes, Internship opportunities are posted onto our Careers website, when available.

What's the best way to apply for a position at CN?

Search and apply for a job on our Careers website. Once you’ve created a profile you’ll be able to apply for additional openings and view the status of your application(s). We do not accept resumes by email, fax or mail.

Can I apply for more than one job at the same time?

Yes, feel free to apply to any jobs you're qualified for.

What is the rehire process for former CN employees?

The application process for a former CN employee is the same as for all other candidates.

Does CN accept foreign applicants?

CN requires that applicants be legally eligible to work in Canada or the US. This includes Citizens, Permanent Residents, or anyone in possession of a work permit with certain conditions. At this time, CN does not provide immigration assistance to foreign applicants.

My Job ApplicationWhat is my application status?

To see your application status, go to our Careers website and login to your candidate profile. It may take some time before your status is updated, as we receive a high volume of applications on a daily basis. If you are being considered for a job, you will be contacted by a member of our Recruitment Team.

Can I withdraw an application?

Yes, if you change your mind about a particular job, you may withdraw your application at any time. If you've already received a job offer, you can simply decline it.

I completed an Online Assessment, what are my next steps?

The Recruitment Team will notify you by email whether or not you will be moving on to the next step of the recruitment process, based on your online assessment results. If successful, you will be invited to the next available recruitment session hosted in the location you have applied to. Keep in mind that it can take several weeks before a session becomes available.

I was unsuccessful with the online assessment - how long must I wait before I can re-apply?

You will have to wait a period of 6 months before you are eligible to re-apply to a position that requires the same testing.

I am having technical difficulties with the online assessment.

For online assessment troubleshooting and support please contact cnrecruitment@cn.ca .

I was not selected for a job and would like feedback on my application.

Due to the high number of applications we receive, we cannot provide feedback as to why each candidate was not progressed.

Using our career siteHow do I create a Careers profile?

Click the Create a Profile button in the upper right-hand corner of our Careers website and complete the form and captcha.

Can I edit a previously submitted cover letters, resumes, and/or documents?

No, once an application has been submitted, you cannot upload additional documents, revise questions, nor replace the existing resume or letters attached to that application.

I forgot my password.

If you forgot your password or need to create a new one, click on the Forgot Password link. Enter your User Name or User ID, and an email containing your password will be sent to you. Be sure to check your inbox, spam, and junk folders for the password recovery email. If you do not receive the password recovery email within 24hrs, contact your Talent Acquisition Advisor directly or send an email to cnrecruitment@cn.ca .

For all other technical issues

If you are experiencing technical difficulties with our Careers website, send us an email at cnrecruitment@cn.ca describing the technical issue(s) in detail and provide us with screenshots so that we can better assist you.

#J-18808-Ljbffr

---