Sr Analyst, Privileged Access Management

Nutrien; Saskatoon; On-site; CAD 95,000 - 120,000; Full time

Job summary

A leading agricultural company in Canada is looking for a Sr. PAM Analyst to design and support Privileged Access Management solutions, including CyberArk and Azure PIM. The ideal candidate has over 5 years of experience in PAM technologies and a strong background in identity security. This role includes mentoring junior team members and overseeing compliance with regulatory requirements.

Qualifications

• 5+ years of experience in PAM administration.
• Strong understanding of least privilege access.
• Experience with audit and compliance initiatives.

Responsibilities

• Provide lifecycle support for PAM tools.
• Act as internal SME for PAM-related issues.
• Support major system upgrades.

Skills

PAM administration

CyberArk

Azure PIM

Identity security principles

Access governance

PowerShell scripting

Communication

Project management

Education

Bachelor's degree in Information Security or Computer Science

Tools

Active Directory

Entra ID

Job description

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose,Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values : safety, inclusion, integrity, and results. When we say we care, we mean it. We’re creating an inclusive workplace where everyone feels safe, has a sense of belonging, trusts one another, and acts with integrity.

Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

As a Sr. PAM Analyst at Nutrien, you will play a critical role in the design, implementation, and operational support of our Privileged Access Management (PAM) solutions. This includes CyberArk and Azure Privileged Identity Management (PIM). You will serve as a subject matter expert (SME) for PAM technologies, helping to shape the PAM roadmap, support audit readiness, and drive adoption of least privilege and just-in-time access models across the enterprise. This position requires deep technical expertise, strong communication skills, and a proactive approach to improving Nutrien’s identity security posture.

What you will do :

PAM Operations and Lifecycle Support : Provide lifecycle support for PAM tools, primarily CyberArk and Azure PIM.

Act as internal SME for all PAM-related issues and enhancements.

Support major system upgrades and ensure PAM platforms remain within vendor support.

Implement and maintain technologies supporting JIT access, least privilege, and segregation of duties.

Help manage Azure PIM policies, role assignments, and access reviews.

Advisory and Enablement : Provide internal advisory services and remove barriers to PAM adoption.

Deliver end-user training and generate user documentation.

Advocate for PAM best practices across the organization.

Mentor junior team members and familiarize them in PAM.

Governance and Audit Support : Oversee evidence collection in support of internal and external audit assessments.

Ensure PAM controls align with regulatory and compliance requirements.

Shape and evolve the Nutrien PAM roadmap in collaboration with stakeholders.

What you will bring :

• Bachelor's degree or equivalent experience in Information Security, Computer Science, or related field.
• 5+ years of experience in PAM administration, including CyberArk and Azure PIM.
• Strong understanding of identity security principles, least privilege, and access governance.
• Experience supporting audit and compliance initiatives (e.g., SoX, PCI, CCPA, CPPA).
• Familiarity with Active Directory, Entra ID, PowerShell scripting, and RBAC models.
• Excellent communication and interpersonal skills with the ability to collaborate across teams.
• Proven ability to manage complex technical projects and support enterprise-scale IAM programs.
• Relevant certifications (e.g., CyberArk Defender / Sentry, Microsoft Certified : Identity and Access Administrator) are a plus.

Ready to make an impact with us?