Identity Access Management Analyst Sr

Job Description

Identity Access Management Analyst Sr

You will be working remote as part of Fidelity’s dynamic working arrangement.

We are seeking an experienced CyberArk Subject Matter Expert (SME) to provide technical expertise and support for our Privileged Access Management (PAM) environment. This role will focus on CyberArk onboarding, troubleshooting, operational support, automation, and continuous improvement. This position will be responsible for the day-to-day processing of Identity Access Management (IAM) requests at Fidelity Canada. The primary responsibilities will include Privileged Access Management (PAM), system access provisioning; creating and performing access reviews; creating and maintaining Job Roles; resolving IAM issues; supporting internal and external Audits and supporting application onboarding activities.

Current work authorization for Canada is required for all openings.

Who We Are

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

What You’ll Do

• Day-to-day processing of access requests, including initial new hire setup, access updates, and termination of access while meeting departmental SLA's and IAM targets.
• Perform access reviews to identify potential security issues such as excessive privileges, separation of duties conflicts, and inappropriate access; act as SME for FIL and FMR access attestations.
• Manage and maintain Job Roles to ensure access remains current and aligned with business needs; perform job role management activities and ensure timely processing of datafeeds.
• Follow RBAC (Role Based Access Control) and least privilege frameworks by reviewing IAM and AD reports, identifying anomalies, supporting audit requests, and addressing audit issues in a timely manner.
• Seek opportunities for process improvements and automation of IAM processes, including enhancing IAM reporting and operational efficiency.
• Lead application onboarding activities by acting as SME, configuring application requests in MyAccess, ensuring application catalogs meet FIL standards, coordinating with the SailPoint team, and representing IAM on business onboarding calls.
• Support internal and external audits by serving as the primary SME, gathering evidence, conducting pre-audit assessments, and implementing remediation plans following audit findings.
• Provide advanced CyberArk technical support and troubleshooting.
• Perform health assessments and manage operational support queues.
• Onboard Canadian applications to PAM and support automated access provisioning.
• Partner with Application Owners to assess requirements, review designs, and ensure onboarding readiness.
• Enhance PAM capabilities through automation and agile delivery.
• Support PAM governance and segregation of duties for critical applications.
• Collaborate with vendors, stakeholders, and the FIL PAM team to implement and support PAM solutions.

What We Are Looking For

• College degree required; a university degree in Information Technology or a related field is preferred, or equivalent work experience.
• 5+ years of experience. Preferable IAM experience within an enterprise environment or related experience in Information Security.
• Strong organizational skills, must be able to handle multiple initiatives/tasks at the same time.
• Must be detail oriented and process driven.

The Expertise You Bring

• 3+ years of hands-on CyberArk experience
• Strong knowledge of CyberArk PAM and its core components.
• Minimum CyberArk Defender certification.
• Strong troubleshooting and analytical skills.
• Experience with PAM onboarding, administration, and access provisioning.
• Strong communication skills and the ability to work effectively across technical and business teams.

Total Rewards That Reflect Your Impact

We believe exceptional work deserves exceptional recognition. That’s why we offer a competitive compensation package designed to support your success today—and your financial well-being tomorrow.

For this role, your total rewards include:

• Base Salary and Discretionary Performance Bonus: Total annual cash compensation (base salary plus target bonus) ranges from $85,000 to $101,000, based on your experience and qualifications.
• RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution—no employee matching required.

We’re proud to offer a compensation package that aligns with provincial pay transparency requirements.

This posting represents an existing vacancy within our organization—an opportunity to step into a role where your talents will make a meaningful difference.

We use AI-enabled LinkedIn Hiring Assistant to support parts of our sourcing process. Every hiring decision is reviewed and finalized by our recruiters. If you choose to ask questions to the LinkedIn HR Hiring Assistant, please be mindful that the responses are not official and must be confirmed for accuracy and completeness by Fidelity. If you are selected for an interview, the recruiter who contacts you can best answer your questions.

Some of the ways we’ll help you feel valued and supported as part of our team:

• Flexible working arrangements - 100% remote, hybrid, and in office options
• Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you.
• Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy
• Parental leave top-up to 100% of your salary for a period of 25 weeks
• Up to $650 for home office equipment
• Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
• Diversity and inclusion programs, including an active network of Employee Resource Groups
• Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation

We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.

Fidelity Canada is an equal opportunity employer.

Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.

Accommodation during the application process

Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at recruiter contact.

No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.