Specialist, Network Architecture - Toronto, ON, Canada - Canadian National Railway

Description

Be part of our Information & Technology (I&T) team, a critical piece of the engine that keeps us in motion.

From enterprise architecture to operational technology, our teams use the agile methodology to automate and digitize our railroad ensuring our operations run optimally and safely and our employees can focus on value-added tasks.

The Specialist Identity and Access Management acts as a subject matter expert and provides guidelines on integration of new solutions into the IAM practice and tools.

This person will coordinate initiatives and projects for the team, working with internal and external partners.
Process Management and Subject Expertise

• Ensure IAM policies, standards and procedures are followed.
• Review and assess operational processes to identify opportunities for improvement related to provisioning/de-provisioning, privileged access management, authentication/authorization, etc.
• Develop, review and maintain strategic and tactical IAM initiatives to reduce risk, increase usability and operational effectiveness.
• Lead and provide guidance in implementing complex IAM projects and overall ensure successful on-time implementations and deployments.
• Transition projects to core operations.
• Handle all core, projects and change requests within the domain; SAP Practice
• Design, build, test and deploy SAP roles with associated entitlements, translating functional requirements into technical design.
• Process SAP access requests and ensure appropriate approvals have been granted. Project integration involving SAP, AD, portal, cloud apps, connecting them to our IGA tool (Saviynt).
• Work with stakeholders to gather requirements needed for new SAP systems or applications integration within the IAM tools and processes.
• Support the implementation of SAP security for new implementations and upgrades.
• Provide technical assistance for issues related to SAP authorizations.
• Security, Architecture, Project Delivery Methodology, SOX etc.)
• The Specialist Identity and Access Management is a key player within I&T, controlling the quality of technology and services delivered into production.

The Specialist Identity and Access Management make recommendations to the business and I&T team members to assist in decision making (including during projects).

The Specialist interfaces directly with many key stakeholders of the organization such as: Change Management, Release Management, Build and Operations Teams, Business and End User, Process Managers and Analysts, Application Support teams, Information Security, Internal Audit and Human Resources.

Bachelor's degree in Computer Science, Information Systems or other related field, or equivalent work experience
Results oriented individual with an ability to deliver quality product in a timely manner.

• Good time management skills.
• Excellent verbal and written communication skills in both English and French.

Technical Skills/Knowledge

• Work experience within the IAM domain using an Identity and Governance application such as IBM Security Identity Manager (ISIM), Saviynt, SailPoint, etc.
• Good understanding of Identity & Access Management concepts and best practices with hands-on experience (ex: Access Certification, Provisioning/De-Provisioning, SSO, Privileged Access Management, Segregation of Duties)
• Experience with SAP authorization in environments such as ECC, Solution Manager, BW, Hana, GRC, Fiori. SAP ABAP & Fiori

o User Management, including SNC (SU01, SU10, EWZ5)
o Fiori Catalogs, Fiori Groups and their management within security roles
o Management of security roles using transports (Solution Manager ChaRM)

• o User management

o Security access/privileges (Role, Role Collections, Groups, etc.)
o User and access management in BTP Cloud Foundry, Space and SAP HANA Cloud

• o User Management

HANA Database
o User Management
Minimum 7 years of relevant work experience
o Minimum 5 years experience in Identity and Access Management

• Work experience within the SAP Security domain

Assets

• Experience with SAP HR authorizations security
• Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. S. through a 19,500 mile rail network, CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN is committed to programs supporting social responsibility and environmental stewardship % %%management%%