Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Identity Access Management Analyst Sr

fil225 open roles

Pay
$85,000 – $101,000 a year
Where
Toronto Office
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity Access Management Analyst Srfil · Toronto Office

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on fil's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. fil postings stay open a median of 14 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 2 days ago

fil median: 14 days open

The posting

Job Description

Identity Access Management Analyst Sr

You will be working remote as part of Fidelity’s dynamic working arrangement.

We are seeking an experienced CyberArk Subject Matter Expert (SME) to provide technical expertise and support for our Privileged Access Management (PAM) environment. This role will focus on CyberArk onboarding, troubleshooting, operational support, automation, and continuous improvement. This position will be responsible for the day-to-day processing of Identity Access Management (IAM) requests at Fidelity Canada. The primary responsibilities will include Privileged Access Management (PAM), system access provisioning; creating and performing access reviews; creating and maintaining Job Roles. resolving IAM issues; supporting internal and externa Audits and supporting application onboarding activities.

Current work authorization for Canada is required for all openings.

Who We Are

At Fidelity, we’ve been helping Canadian investors build better financial futures for over 35 years. We offer individuals and institutions a range of trusted investment portfolios and services - and we’re constantly seeking to find new and better ways to help our clients. As a privately owned company, we boldly embrace innovation in all areas as we continue to grow our business into the future.

Working with us means you’ll be part of a diverse and dedicated group of people who make a real difference for our clients and communities every day. You’ll have a wide range of opportunities to grow and develop your career in an inclusive environment where you’ll feel valued and supported to be your best - both personally and professionally.

What You’ll Do:

  • Day-to-day processing of access requests, including initial new hire setup, access updates, and termination of access while meeting departmental SLA's and IAM targets.
  • Perform access reviews to identify potential security issues such as excessive privileges, separation of duties conflicts, and inappropriate access; act as SME for FIL and FMR access attestations.
  • Manage and maintain Job Roles to ensure access remains current and aligned with business needs; perform job role management activities and ensure timely processing of datafeeds.
  • Follow RBAC (Role Based Access Control) and least privilege frameworks by reviewing IAM and AD reports, identifying anomalies, supporting audit requests, and addressing audit issues in a timely manner.
  • Seek opportunities for process improvements and automation of IAM processes, including enhancing IAM reporting and operational efficiency.
  • Lead application onboarding activities by acting as SME, configuring application requests in MyAccess, ensuring application catalogs meet FIL standards, coordinating with the SailPoint team, and representing IAM on business onboarding calls.
  • Support internal and external audits by serving as the primary SME, gathering evidence, conducting pre-audit assessments, and implementing remediation plans following audit findings.
  • Provide advanced CyberArk technical support and troubleshooting.
  • Perform health assessments and manage operational support queues.
  • Onboard Canadian applications to PAM and support automated access provisioning.
  • Partner with Application Owners to assess requirements, review designs, and ensure onboarding readiness.
  • Enhance PAM capabilities through automation and agile delivery.
  • Support PAM governance and segregation of duties for critical applications.
  • Collaborate with vendors, stakeholders, and the FIL PAM team to implement and support PAM solutions.

What We Are Looking For:

  • College degree required; College degree required; a university degree in Information Technology or a related field is preferred, or equivalent work experience.
  • 5+ years of experience Preferable IAM experience within an enterprise environment or related experience in the Information Security.
  • Strong organizational skills, must be able to handle multiple initiatives/tasks at the same time.
  • Must be detail oriented and process driven.

The Expertise You Bring:

  • 3+ years of hands-on CyberArk experience
  • Strong knowledge of CyberArk PAM and its core components.
  • Minimum CyberArk Defender certification.
  • Strong troubleshooting and analytical skills.
  • Experience with PAM onboarding, administration, and access provisioning.
  • Strong communication skills and the ability to work effectively across technical and business teams.

Total Rewards That Reflect Your Impact

We believe exceptional work deserves exceptional recognition. That’s why we offer a competitive compensation package designed to support your success today—and your financial well-being tomorrow.

For this role, your total rewards include:

Base Salary and Discretionary Performance Bonus: Total annual cash compensation (base salary plus target bonus) ranges from $85,000 to $101,000, based on your experience and qualifications.

RRSP Contribution: After 6 months of employment, we invest in your future with an RRSP contribution—no employee matching required.

We’re proud to offer a compensation package that aligns with provincial pay transparency requirements.

This posting represents an existing vacancy within our organization—an opportunity to step into a role where your talents will make a meaningful difference.

We use AI-enabled LinkedIn Hiring Assistant to support parts of our sourcing process. Every hiring decision is reviewed and finalized by our recruiters. If you choose to ask questions to the LinkedIn HR Hiring Assistant, please be mindful that the responses are not official and must be confirmed for accuracy and completeness by Fidelity. If you are selected for an interview, the recruiter who contacts you can best answer your questions.

Some of the ways we’ll help you feel valued and supported as part of our team:

  • Flexible working arrangements - 100% remote, hybrid, and in office options
  • Competitive total compensation, including company contributions to your group RRSP without a matching requirement from you.
  • Comprehensive health benefits that start on your first day, with 100% employer-paid premiums, that include up to $5000 annually for mental health services and therapy
  • Parental leave top-up to 100% of your salary for a period of 25 weeks
  • Up to $650 for home office equipment
  • Generous time off policy, including 2 paid days annually to volunteer at a charity of your choice
  • Diversity and inclusion programs, including an active network of Employee Resource Groups
  • Extensive professional development opportunities, including access to over 11,000 training and development courses, tuition reimbursement, and monetary rewards for completing a required designation

We care a lot about fostering a compassionate, people-centric culture, and are proud to have been named one of Canada’s Top 100 employers for the last five years.

Fidelity Canada is an equal opportunity employer

Fidelity Canada is committed to fostering a diverse and inclusive workplace. We will consider all qualified applicants for employment regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national or ethnic origin, age, disability, family status, protected veterans’ status, Aboriginal/Native American status or any other legally-protected ground.

Accommodation during the application process

Fidelity Canada welcomes and encourages applications from people with disabilities. Accommodations are available on request for candidates taking part in the selection process. If you require an accommodation, please email us at [email protected].

No telephone inquiries or agencies please. We thank all applicants for their interest, please be advised that only those selected for an interview will be contacted.

Why Work at Fidelity?

We are proud to be recipients of the following:

Awards

• Canada's Top 100 Employers o Greater Toronto's Top Employers o Canada's Top Family-Friendly Employers o Canada's Top Employers for Young People

• Great Place To Work® Certified o Best Workplaces for Inclusion o Best Workplaces for Mental Wellness o Best Workplaces for Today's Youth o Best Workplaces for Women o Best Workplaces in Financial Services & Insurance o Best Workplaces in Ontario o Best Workplaces with Most Trusted Executive Teams

• LinkedIn Top Companies in Canada

• Human Resource Director (HRD) - Best Place To Work o HRD - 5-Star Benefit Program o HRD - 5-Star Diversity & Inclusion Employer

Designations • Canadian Compassionate Companies – Certified • Benefits Canada's Workplace Benefits Award - Future of Work Strategy • TalentEgg National Recruitment Excellence Award - Special Award for Diversity & Inclusion in Recruiting • Canadian HR Reporter's Most Innovative HR Team

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against fil's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on fil's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    fil's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.