Specialist Identity and Access Management

Specialist Identity and Access Management (SAP)

At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely and our employees can focus on value-added tasks. You will be able to develop your skills and career in our close-knit, safety-focused culture working together as ONE TEAM. The careers we offer are meaningful because the work we do matters. Join us

Job Summary

The Specialist Identity and Access Management acts as a subject matter expert and provides guidelines on integration of new solutions into the IAM practice and tools. The Specialist IAM will review existing processes and identify opportunities for improvement. This person will coordinate initiatives and projects for the team, working with internal and external partners.

Main Responsibilities

Process Management and Subject Expertise

· Provide subject matter expertise in the IAM domain.

· Organize committee meetings with stakeholders within the domain.

· Ensure IAM policies, standards and procedures are followed.

· Produce measures/metrics for the function.

· Ensure that auditing procedures and audit reports are executed on time.

· Review and assess operational processes to identify opportunities for improvement related to provisioning/de-provisioning, privileged access management, authentication/authorization, etc.

· Develop, review and maintain strategic and tactical IAM initiatives to reduce risk, increase usability and operational effectiveness.

· Lead and provide guidance in implementing complex IAM projects and overall ensure successful on-time implementations and deployments.

· Transition projects to core operations.

· Handle all core, projects and change requests within the domain; prioritize, analyze requests and engage required teams.

SAP Practice

· Design, build, test and deploy SAP roles with associated entitlements, translating functional requirements into technical design.

· Process SAP access requests and ensure appropriate approvals have been granted. Assign roles to permit access to secured IT environments.

· Project integration involving SAP, AD, portal, cloud apps, connecting them to our IGA tool (Saviynt).

· Work with stakeholders to gather requirements needed for new SAP systems or applications integration within the IAM tools and processes.

· Support the implementation of SAP security for new implementations and upgrades.

· Provide technical assistance for issues related to SAP authorizations.

· Apply, and ensure compliance with all appropriate CN IT standards (e.g. Security, Architecture, Project Delivery Methodology, SOX etc.)

· Create and maintain accurate process documentation.

Organizational Impact

Decision Making & Impacts

The Specialist Identity and Access Management is a key player within I&T, controlling the quality of technology and services delivered into production.

The Specialist Identity and Access Management make recommendations to the business and I&T team members to assist in decision making (including during projects).

Level of Interaction/Influence

The Specialist interfaces directly with many key stakeholders of the organization such as: Change Management, Release Management, Build and Operations Teams, Business and End User, Process Managers and Analysts, Application Support teams, Information Security, Internal Audit and Human Resources.

Employees Supervised/Org. Structure

· Individual Contributor

Requirements

Education/Certification/Designation

· Bachelor’s degree in Computer Science, Information Systems or other related field, or equivalent work experience

General Skills and Competencies

· Results oriented individual with an ability to deliver quality product in a timely manner.

· Ability to handle multiple and moderately sized assignments simultaneously.

· Competent at problem-solving through ingenuity and creativity.

· Detail oriented

· Ability to prioritize between many important requests.

· Ability to organize.

· Ability to think and act under pressure.

· Strong teamwork and collaboration skills. Can adapt to the audience.

· Excellent verbal and written communication skills in both English and French.

Technical Skills/Knowledge

· Work experience within the IAM domain using an Identity and Governance application such as IBM Security Identity Manager (ISIM), Saviynt, SailPoint, etc.

· Good understanding of Identity & Access Management concepts and best practices with hands-on experience (ex: Access Certification, Provisioning/De-Provisioning, SSO, Privileged Access Management, Segregation of Duties)

· Experience with SAP authorization in environments such as ECC, Solution Manager, BW, Hana, GRC, Fiori. More specifically:

o User Management, including SNC (SU01, SU10, EWZ5)

o Security roles (PFCG), Master/Derived and authorizations

o Fiori Catalogs, Fiori Groups and their management within security roles

o Management of security roles using transports (Solution Manager ChaRM)

· Cloud applications (BTP, IBP, SAC, Datasphere, Workzone, ABAP on Cloud, Cloud ALM, Signavio, EnableNow, Vertex)

o Security access/privileges (Role, Role Collections, Groups, etc.)

o User and access management in BTP Cloud Foundry, Space and SAP HANA Cloud

· Cloud Identity Services

o Understanding of the Authentication and provisioning mechanisms of connected applications

o User Management

o User Groups

o User Management

o Security roles (catalog, repository)

Experience

· Minimum 7 years of relevant work experience

o Minimum 5 years experience in Identity and Access Management

· Work experience within the SAP Security domain

Assets

· Experience with SAP HR authorizations security

Working Conditions

This role will require off-hour support on a rotational basis.

About CN
CN is a world-class transportation leader and trade-enabler. Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. As the only railroad connecting Canada’s Eastern and Western coasts with the Southern tip of the U.S. through a 19,500 mile rail network, CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN is committed to programs supporting social responsibility and environmental stewardship. At CN, we work as ONE TEAM, focused on safety, sustainability and our customers, providing operational and supply chain excellence to deliver results.

For internal candidates, note that the grade level of the position will depend on the employee's experience.

CN is an employment equity employer and we encourage all qualified candidates to apply. We thank all applicants for their interest, however, only candidates under consideration will be contacted. Please monitor your email on a regular basis, as communication is primarily made through email. 

FAQ
Check here for answers to your CN hiring questions. Applying for a Job at CNDoes CN offer entry-level positions?

Yes, we have many positions ranging from entry to senior levels, both in the field and in corporate and IT functions. All available positions are posted onto our Careers website.

Does CN hire students, interns, and new graduates?

Yes, Internship opportunities are posted onto our Careers website, when available.

What's the best way to apply for a position at CN?

Search and apply for a job on our Careers website. Once you’ve created a profile you’ll be able to apply for additional openings and view the status of your application(s). We do not accept resumes by email, fax or mail.

Can I apply for more than one job at the same time?

Yes, feel free to apply to any jobs you're qualified for.

What is the rehire process for former CN employees?

The application process for a former CN employee is the same as for all other candidates.

Does CN accept foreign applicants?

CN requires that applicants be legally eligible to work in Canada or the US. This includes Citizens, Permanent Residents, or anyone in possession of a work permit with certain conditions. At this time, CN does not provide immigration assistance to foreign applicants.

My Job ApplicationWhat is my application status?

To see your application status, go to our Careers website and login to your candidate profile. It may take some time before your status is updated, as we receive a high volume of applications on a daily basis. If you are being considered for a job, you will be contacted by a member of our Recruitment Team.

Can I withdraw an application?

Yes, if you change your mind about a particular job, you may withdraw your application at any time. If you've already received a job offer, you can simply decline it.

I completed an Online Assessment, what are my next steps?

The Recruitment Team will notify you by email whether or not you will be moving on to the next step of the recruitment process, based on your online assessment results. If successful, you will be invited to the next available recruitment session hosted in the location you have applied to. Keep in mind that it can take several weeks before a session becomes available.

I was unsuccessful with the online assessment - how long must I wait before I can re-apply?

You will have to wait a period of 6 months before you are eligible to re-apply to a position that requires the same testing.

I am having technical difficulties with the online assessment.

For online assessment troubleshooting and support please contact cnrecruitment@cn.ca .

I was not selected for a job and would like feedback on my application.

Due to the high number of applications we receive, we cannot provide feedback as to why each candidate was not progressed.

Using our career siteHow do I create a Careers profile?

Click the Create a Profile button in the upper right-hand corner of our Careers website and complete the form and captcha.

Can I edit a previously submitted cover letters, resumes, and/or documents?

No, once an application has been submitted, you cannot upload additional documents, revise questions, nor replace the existing resume or letters attached to that application.

I forgot my password.

If you forgot your password or need to create a new one, click on the Forgot Password link. Enter your User Name or User ID, and an email containing your password will be sent to you. Be sure to check your inbox, spam, and junk folders for the password recovery email. If you do not receive the password recovery email within 24hrs, contact your Talent Acquisition Advisor directly or send an email to cnrecruitment@cn.ca .

For all other technical issues

If you are experiencing technical difficulties with our Careers website, send us an email at cnrecruitment@cn.ca describing the technical issue(s) in detail and provide us with screenshots so that we can better assist you.

#J-18808-Ljbffr

---