Identity Access Management Analyst Sr

Fidelity Investments Canada; Canada; Remote; CAD 85,000 - 101,000; Full time

Benefits offered by this job

Remote work arrangement

Job summary

Fidelity Investments Canada is seeking an experienced Identity Access Management Analyst Sr to support Privileged Access Management (PAM) and CyberArk onboarding. This remote role focuses on onboarding, troubleshooting, automation, and continuous improvement within Fidelity's PAM environment.

You will handle day-to-day IAM requests, access reviews, and application onboarding, while aligning with RBAC and audit requirements across Canada.

Qualifications

• 5+ years of IAM experience in enterprise environments.
• Strong troubleshooting and analytical skills.
• Minimum CyberArk Defender certification.

Responsibilities

• Process day-to-day IAM access requests and onboarding.
• Perform access reviews to detect excess privileges and conflicts.
• Manage Job Roles and ensure timely datafeed processing.

Skills

CyberArk

IAM

PAM

Troubleshooting

Analytical skills

Automation

Education

College degree

Information Technology degree preferred

Tools

MyAccess

SailPoint

Active Directory

Job description

Job Description

Identity Access Management Analyst Sr

You will be working remote as part of Fidelity's dynamic working arrangement.

We are seeking an experienced CyberArk Subject Matter Expert (SME) to provide technical expertise and support for our Privileged Access Management (PAM) environment. This role will focus on CyberArk onboarding, troubleshooting, operational support, automation, and continuous improvement. This position will be responsible for the day-to-day processing of Identity Access Management (IAM) requests at Fidelity Canada. The primary responsibilities will include Privileged Access Management (PAM), system access provisioning; creating and performing access reviews; creating and maintaining Job Roles. resolving IAM issues; supporting internal and externa Audits and supporting application onboarding activities.

Current work authorization for Canada is required for all openings.

Who We Are

At Fidelity, we've been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we're constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you'll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You'll have a wide range of opportunities to grow and develop your career in an inclusive environment where you'll feel valued and supported to be your best - both personally and professionally.

What You'll Do

• Day-to-day processing of access requests, including initial new hire setup, access updates, and termination of access while meeting departmental SLA's and IAM targets.
• Perform access reviews to identify potential security issues such as excessive privileges, separation of duties conflicts, and inappropriate access; act as SME for FIL and FMR access attestations.
• Manage and maintain Job Roles to ensure access remains current and aligned with business needs; perform job role management activities and ensure timely processing of datafeeds.
• Follow RBAC (Role Based Access Control) and least privilege frameworks by reviewing IAM and AD reports, identifying anomalies, supporting audit requests, and addressing audit issues in a timely manner.
• Seek opportunities for process improvements and automation of IAM processes, including enhancing IAM reporting and operational efficiency.
• Lead application onboarding activities by acting as SME, configuring application requests in MyAccess, ensuring application catalogs meet FIL standards, coordinating with the SailPoint team, and representing IAM on business onboarding calls.
• Support internal and external audits by serving as the primary SME, gathering evidence, conducting pre-audit assessments, and implementing remediation plans following audit findings.
• Provide advanced CyberArk technical support and troubleshooting.
• Perform health assessments and manage operational support queues.
• Onboard Canadian applications to PAM and support automated access provisioning.
• Partner with Application Owners to assess requirements, review designs, and ensure onboarding readiness.
• Enhance PAM capabilities through automation and agile delivery.
• Support PAM governance and segregation of duties for critical applications.
• Collaborate with vendors, stakeholders, and the FIL PAM team to implement and support PAM solutions.

What We Are Looking For

• College degree required; College degree required; a university degree in Information Technology or a related field is preferred, or equivalent work experience.
• 5+ years of experience Preferable IAM experience within an enterprise environment or related experience in the Information Security.
• Strong organizational skills, must be able to handle multiple initiatives/tasks at the same time.
• Must be detail oriented and process driven.

The Expertise You Bring

• 3+ years of hands‑on CyberArk experience
• Strong knowledge of CyberArk PAM and its core components.
• Minimum CyberArk Defender certification.
• Strong troubleshooting and analytical skills.
• Experience with PAM onboarding, administration, and access provisioning.
• Strong communication skills and the ability to work effectively across technical and business teams.

Total Rewards That Reflect Your Impact

We believe exceptional work deserves exceptional recognition. That's why we offer a competitive compensation package designed to support your success today-and your financial well-being tomorrow.

For this role, your total rewards include:

• Base Salary and Discretionary Performance Bonus: Total annual cash compensation (base salary plus target bonus) ranges from $85,000 to $101,000, based on your experience and qualifications.
• RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution-no employee matching requir