Sr Specialist IS Infra Platforms Identity

Canadian Pacific (CP) and Kansas City Southern (KCS) are now CPKC. As the only truly North American railway, we are making big moves! Drawing on our strong foundations and heritage, CPKC moves essential goods across our 20,000-mile network to support economic growth throughout Canada, the U.S. and Mexico. Be a part of history as we connect a continent and create exciting career opportunities across our new transnational network. Visit cpkcr.com to learn about the CPKC advantage, our purpose and culture.

 

PURPOSE OF THE POSITION:

This specialist role is responsible for supporting, design and implementation of CPKC's identity and authentication technologies. Current and future active directory design, group policy development and oversight, privileged access management support, single sign-on support, root cause analysis and problem solving.  This position requires disciplined technical leadership and the ability to design and integrate application solutions into CPKC's authentication infrastructure that adhere to enterprise standards.

The professional is recognized within the organization as a functional expert with specialized depth and/or breadth of knowledge. Works independently, with guidance only in the most complex situations. Solves complex problems; identifies new solutions using a broad perspective and understanding. Leads large scale projects with substantial resource requirements, risk, and/or complexity. May lead a project team with influence over contribution of others. Translates functional vision into plans and guides their execution. 

 

POSITION ACCOUNTABILITIES:

• Responsible for designing, integrating, supporting, and administering active directory, group policy administration, privileged access management system, and single sign-on and multi-factor authentication environments
• Manages active directory reporting and alerting environments using AD Audit and Varonis toolsets
• Oversees Azure Active-Directory replication and authentication
• Enhances the operation and reliability of enterprise systems through process automation, monitoring, and alerting
• Leads root cause analysis for incident and problem management in assigned environments
• Establishes and maintains relationships with vendors to stay updated on product roadmap, enhancements, patches, and upgrades
• Works directly with vendor solutions in projects and upgrades related to the environment
• Creates, maintains, and updates platform documentation and standard operating procedures
• Provides 24/7 support for specific role and participates in scheduled on-call rotations
• Adheres to CPKC's change and configuration management processes
• Follows designated CPKC architecture and industry best practices to meet business needs
• Demonstrates responsibility, accountability, and credibility in all work and research assignments
• Provides mentorship to colleagues in job-specific duties
• Communicates effectively through verbal and written communication, with a focus on documentation
• Identifies, isolates, and resolves production and non-production system problems, service requests, and support processes
• Handles stress resulting from project deadlines and a multitasking environment
• Represents CPKC's Vision, Values, and Culture in interactions with the team, clients, and stakeholders

 

POSITION REQUIREMENTS:

• Bachelor's degree from an accredited university or college, preferably in a job related major field of study
• Minimum seven (7) years of relevant professional experience in design, deployment, or administration of active directory environments
• Demonstrated experience of Kerberos and Windows Authentication
• Demonstrated experience and knowledge of PKI, digital certifications, & security tokens
• Knowledge of secure cloud platform authentication management

 

PREFERRED QUALIFICATIONS

• Demonstrated experience with privileged access management
• Demonstrated experience with single sign-on solutions
• Demonstrated experience with multi-factor authentication solutions
• Demonstrated experience designing and integrating application authentication solutions into the infrastructure to meet project requirements
• Microsoft Certified Systems Engineer (MCSE) certification preferred
• ITIL certification preferred

 

WHAT CPKC HAS TO OFFER:

• Flexible and competitive benefits package
• Employer Funded Retirement Plan
• Employee Share Purchase Plan
• Performance Incentive Program
• Annual Fitness Subsidy
• Part-time Studies Program

 

ADDITIONAL INFORMATION: