Identity Access Management Analyst Sr

Fidelity International; Toronto; Remote; CAD 85,000 - 101,000; Full time

Benefits offered by this job

100% remote options

Health benefits

RRSP contribution

Parental leave top‑up

Home office equipment budget

Training and development

Job summary

Fidelity Canada is hiring an Identity Access Management Analyst Sr to support Privileged Access Management (PAM) and IAM workflows. The role is remote with flexible working arrangements and requires 5+ years in IAM/PAM, with strong CyberArk skills.

The ideal candidate will onboard Canadian applications to PAM, perform access reviews, and collaborate with cross‑functional teams to automate IAM processes and ensure audit readiness.

Qualifications

• College degree or higher; IT field preferred.
• 5+ years of IAM/PAM experience in enterprise environments.
• Strong understanding of RBAC and least-privilege principles.

Responsibilities

• Process IAM access requests daily and manage onboarding/offboarding.
• Perform access reviews and attestations to identify risks.
• Manage Job Roles and datafeeds for access provisioning.
• Provide CyberArk SME guidance and troubleshooting support.
• Assist audits and remediation activities with evidence gathering.

Skills

CyberArk experience

IAM & PAM

RBAC & least privilege

Audit support

Automation & optimization

Strong communication

Education

College degree required

University degree in IT preferred

Tools

MyAccess

SailPoint

AD reports

Job description

Job Description Identity Access Management Analyst Sr You will be working remote as part of Fidelity’s dynamic working arrangement.

We are seeking an experienced CyberArk Subject Matter Expert (SME) to provide technical expertise and support for our Privileged Access Management (PAM) environment. This role will focus on CyberArk onboarding, troubleshooting, operational support, automation, and continuous improvement. This position will be responsible for the day-to-day processing of Identity Access Management (IAM) requests at Fidelity Canada. The primary responsibilities will include Privileged Access Management (PAM), system access provisioning; creating and performing access reviews; creating and maintaining Job Roles. resolving IAM issues; supporting internal and externa Audits and supporting application onboarding activities. Current work authorization for Canada is required for all openings.

Who We Are At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future. Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

What You’ll Do:

• Day-to-day processing of access requests, including initial new hire setup, access updates, and termination of access while meeting departmental SLA's and IAM targets.
• Perform access reviews to identify potential security issues such as excessive privileges, separation of duties conflicts, and inappropriate access; act as SME for FIL and FMR access attestations.
• Manage and maintain Job Roles to ensure access remains current and aligned with business needs; perform job role management activities and ensure timely processing of datafeeds.
• Follow RBAC (Role Based Access Control) and least privilege frameworks by reviewing IAM and AD reports, identifying anomalies, supporting audit requests, and addressing audit issues in a timely manner.
• Seek opportunities for process improvements and automation of IAM processes, including enhancing IAM reporting and operational efficiency.
• Lead application onboarding activities by acting as SME, configuring application requests in MyAccess, ensuring application catalogs meet FIL standards, coordinating with the SailPoint team, and representing IAM on business onboarding calls.
• Support internal and external audits by serving as the primary SME, gathering evidence, conducting pre-audit assessments, and implementing remediation plans following audit findings.
• Provide advanced CyberArk technical support and troubleshooting.
• Perform health assessments and manage operational support queues.
• Onboard Canadian applications to PAM and support automated access provisioning.
• Partner with Application Owners to assess requirements, review designs, and ensure onboarding readiness.
• Enhance PAM capabilities through automation and agile delivery.
• Support PAM governance and segregation of duties for critical applications.
• Collaborate with vendors, stakeholders, and the FIL PAM team to implement and support PAM solutions.

What We Are Looking For:

• College degree required;
• College degree required;
• a university degree in Information Technology or a related field is preferred, or equivalent work experience.
• 5+ years of experience
• Preferable IAM experience within an enterprise environment or related experience in the Information Security.
• Strong organizational skills, must be able to handle multiple initiatives/tasks at the same time.
• Must be detail oriented and process driven.

The Expertise You Bring:

• 3+ years of hands-on CyberArk experience
• Strong knowledge of CyberArk PAM and its core components
• Minimum CyberArk Defender certification
• Strong troubleshooting and analytical skills
• Experience with PAM onboarding, administration, and access provisioning
• Strong communication skills and the ability to work effectively across technical and business teams

Total Rewards That Reflect Your Impact

We believe exceptional work deserves exceptional recognition. That’s why we offer a competitive compensation package designed to support your success today—and your financial well‑being tomorrow.

Base Salary and Discretionary Performance Bonus: Total annual cash compensation (base salary plus target bonus) ranges from $85,000 to $101,000, based on your experience and qualifications.

RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution—no employee matching required.

We’re proud to offer a compensation package that aligns with provincial pay transparency requirements.

Some of the ways we’ll help you feel valued and supported as part of our team:

• Flexible working arrangements - 100% remote, hybrid, and in office options
• Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you.
• Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy
• Parental leave top-up to 100% of your salary for a period of 25 weeks
• Up to $650 for home office equipment
• Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
• Diversity and inclusion programs, including an active network of Employee Resource Groups
• Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation

Why Work at Fidelity?

We are proud to be recipients of the following:

• Canada's Top 100 Employers
• Greater Toronto's Top Employers
• Canada's Top Family-Friendly Employers
• Canada's Top Employers for Young People
• Great Place To Work® Certified
• Best Workplaces for Inclusion
• Best Workplaces for Mental Wellness
• Best Workplaces for Today's Youth
• Best Workplaces for Women
• Best Workplaces in Financial Services & Insurance
• Best Workplaces in Ontario
• Best Workplaces with Most Trusted Executive Teams
• LinkedIn Top Companies in Canada
• Human Resource Director (HRD) - Best Place To Work
• HRD - 5-Star Benefit Program
• HRD - 5-Star Diversity & Inclusion Employer Designations
• Canadian Compassionate Companies – Certified
• Benefits Canada's Workplace Benefits Award - Future of Work Strategy
• TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting
• Canadian HR Reporter's Most Innovative HR Team

About Us Fidelity Canada has become an employer of choice for talented people seeking rewarding career opportunities in the financial services industry. We look to hire outstanding individuals who want to maximize their potential and be challenged in all aspects of their professional careers. To help our employees excel in their roles at Fidelity, we provide everyone here with the best training, resources and support possible throughout their careers. With our help, there’s no limit to what you can accomplish here. We’re excited you’re considering Fidelity for your career plans.

Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at [e-mail].

No telephone inquiries or agencies please.

We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.

Fidelity Canada is an equal opportunity employer Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground. Accommodation during the application process Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at [e-mail].

Fidelity respects the privacy of your information. Click for a detailed data protection and privacy statement.