Specialist Identity and Access Management (SAP)

at  Canadian National Railway

At CN, we work together to move our company—and North America—forward. Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion. From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely and our employees can focus on value-added tasks. You will be able to develop your skills and career in our close-knit, safety-focused culture working together as ONE TEAM. The careers we offer are meaningful because the work we do matters. Join us!

JOB SUMMARY

The Specialist Identity and Access Management acts as a subject matter expert and provides guidelines on integration of new solutions into the IAM practice and tools. The Specialist IAM will review existing processes and identify opportunities for improvement. This person will coordinate initiatives and projects for the team, working with internal and external partners.

EDUCATION/CERTIFICATION/DESIGNATION

• Bachelor’s degree in Computer Science, Information Systems or other related field, or equivalent work experience

GENERAL SKILLS AND COMPETENCIES

• Results oriented individual with an ability to deliver quality product in a timely manner.
• Ability to handle multiple and moderately sized assignments simultaneously.
• Competent at problem-solving through ingenuity and creativity.
• Detail oriented
• Good time management skills.
• Ability to prioritize between many important requests.
• Ability to organize.
• Ability to think and act under pressure.
• Strong teamwork and collaboration skills. Can adapt to the audience.
• Excellent verbal and written communication skills in both English and French.

TECHNICAL SKILLS/KNOWLEDGE

• Work experience within the IAM domain using an Identity and Governance application such as IBM Security Identity Manager (ISIM), Saviynt, SailPoint, etc.
• Good understanding of Identity & Access Management concepts and best practices with hands-on experience (ex: Access Certification, Provisioning/De-Provisioning, SSO, Privileged Access Management, Segregation of Duties)
• Experience with SAP authorization in environments such as ECC, Solution Manager, BW, Hana, GRC, Fiori. More specifically:
• SAP ABAP & Fiori
  o User Management, including SNC (SU01, SU10, EWZ5)
  o Security roles (PFCG), Master/Derived and authorizations
  o Fiori Catalogs, Fiori Groups and their management within security roles

o Management of security roles using transports (Solution Manager ChaRM)

• Cloud applications (BTP, IBP, SAC, Datasphere, Workzone, ABAP on Cloud, Cloud ALM, Signavio, EnableNow, Vertex)

o User management
o Security access/privileges (Role, Role Collections, Groups, etc.)

o User and access management in BTP Cloud Foundry, Space and SAP HANA Cloud

• Cloud Identity Services

o Understanding of the Authentication and provisioning mechanisms of connected applications
o User Management

o User Groups

• HANA Database

o User Management
o Security roles (catalog, repository)

EXPERIENCE

• Minimum 7 years of relevant work experience

o Minimum 5 years experience in Identity and Access Management

• Work experience within the SAP Security domain

o Management of security roles using transports (Solution Manager ChaRM)

• Cloud applications (BTP, IBP, SAC, Datasphere, Workzone, ABAP on Cloud, Cloud ALM, Signavio, EnableNow, Vertex