Spec IS Infra Platforms Microsoft

Canadian Pacific Railway; Calgary; On-site; CAD 80,000 - 120,000; Full time

Job summary

Join a leading railway company where you will play a vital role in enhancing identity and authentication technologies. This position involves designing next-generation Active Directory solutions and leading crucial projects that impact the entire organization while fostering a culture of inclusion and development.

Benefits

Flexible and competitive benefits package

Competitive pension plans

Employee share purchase plan

Performance incentive plan

Annual fitness subsidy

Qualifications

• 7+ years of experience in Active Directory design and administration.
• Expertise in Kerberos, Windows Authentication, and security tokens.
• Knowledge of Azure Active Directory and secure cloud solutions.

Responsibilities

• Design and implement Active Directory and authentication systems.
• Lead root cause analysis and improvements for incidents.
• Collaborate with vendors for product upgrades and integrations.

Skills

Active Directory Design

Privileged Access Management

Single Sign-On

Multi-Factor Authentication

System Reliability Automation

Education

Bachelor's degree in a related field

Microsoft Certified Systems Engineer (MCSE)

Information Technology Infrastructure Library (ITIL)

Tools

AD Audit

Varonis

Job description

Select how often (in days) to receive an alert:

Join CPKC, North America’s first transnational railroad connecting U.S., Canada, and Mexico, where your career drives progress and safety is paramount. We connect communities, fuel economic growth, and provide meaningful work in a culture that values diversity, accountability, and pride. With opportunities for training, development, and advancement, you’re not just building a career—you’re part of something bigger. Together, we move goods, connect people, and create lasting change. Your future starts here.

PURPOSE OF THE POSITION:

Take on a pivotal role in crafting and securing CPKC’s identity and authentication technologies. From designing next-generation Active Directory solutions to improving privileged access and single sign-on systems, you'll tackle complex challenges with innovation and leadership. As a trusted expert, your work will drive the resilience and scalability of critical systems while collaborating across teams for impactful, enterprise-wide solutions.

POSITION ACCOUNTABILITIES:

• Design, implement, and support Active Directory, group policies, privileged access management, single sign-on, and multi-factor authentication systems
• Manage Azure Active Directory (AD) replication and authentication processes while ensuring system reliability through automation and monitoring
• Lead root cause analysis for incidents and problems, driving resolutions and improving system performance
• Collaborate with vendors on product roadmaps, upgrades, and integrations to optimize authentication infrastructure
• Develop and maintain comprehensive documentation, standard operating procedures, and technical communication
• Provide mentorship and technical guidance to colleagues while participating in 24/7 on-call rotations
• Follow change and configuration management processes to maintain compliance with corporate architecture standards
• Drive large-scale projects with meaningful complexity while representing CPKC’s Vision, Values, and Culture

POSITION REQUIREMENTS:

• Bachelor's degree in a related field with a preference for Industry certifications like Microsoft Certified Systems Engineer (MCSE) and Information Technology Infrastructure Library (ITIL)
• 7+ years of experience in Active Directory design, deployment, or administration including expertise in Kerberos, Windows Authentication, digital certificates, and security tokens
• 3+ years of advanced skills in designing and integrating application authentication solutions into enterprise infrastructures
• Knowledge of tools such as AD Audit and Varonis for reporting, alerting, and monitoring Active Directory environments
• Familiarity with Azure Active Directory replication, authentication, and secure cloud-based solutions

WHAT CPKC HAS TO OFFER:

• Flexible and competitive benefits package
• Competitive company pension and/or retirement plans
• Employee share purchase plan
• Performance incentive plan
• Annual fitness subsidy

PRE-EMPLOYMENT REQUIREMENTS:

• Criminal history check
• Education verification
• Professional references
• Social Security Number verification

BECOMING A RAILROADER:

As an employee with a North American presence, the possibility does exist that the location of your position may be changed based on organizational requirements.

Management Conductor Program

Becoming a qualified conductor or locomotive engineer is the single best way for a management employee to learn the business at CPKC. You may be required to obtain a certification or to maintain your current certification/qualification as a conductor or locomotive engineer.

CULTURE OF INCLUSION:

For our U.S. applicants, CPKC is an equal opportunity/affirmative action employer, inclusive of protected veterans and individuals with disabilities. For Canadian applicants CPKC is an employment equity employer committed to the principles of employment equity and inclusion. We encourage all qualified candidates to apply including: women, Black, Indigenous, People of Color (BIPOC), members of the LGBTQ+ community and people with disabilities. Accommodations for the job application process can be provided, as appropriate, upon request. All applicant information will be managed in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA).