Join CPKC, North America’s first transnational railroad connecting U.
Canada, and Mexico, where your career drives progress and safety is paramount. We connect communities, fuel economic growth, and provide meaningful work in a culture that values diversity, accountability, and pride. With opportunities for training, development, and advancement, you’re not just building a career—you’re part of something bigger. As a Senior Specialist, Enterprise Security, you will be at the forefront of the organization's identity security strategy, helping protect critical systems through advanced CyberArk Privileged Access Management (PAM), Identity and Access Management (IAM), Identity Governance and Administration (IGA), and Public Key Infrastructure (PKI) capabilities. This role provides the chance to work with leading-edge cybersecurity technologies, influence enterprise security standards, and lead initiatives that strengthen regulatory compliance, operational resilience, and cyber defense. Your expertise will play a key role in securing privileged access, enhancing identity governance, managing digital trust through PKI, and enabling the business to operate confidently and securely in an evolving threat landscape.
Administer, maintain, upgrade, and optimize the CyberArk PAM platform, including Vault, CPM, PSM, PWA, PTA, account onboarding, credential management, password rotation, privileged session management, just-in-time access, and privileged access workflowsDesign, support, and troubleshoot CyberArk integrations with Windows, Linux/UNIX, databases, network devices, cloud platforms, directory services, SaaS applications, and other enterprise technologies, including the development of custom connectors, scripts, APIs, and automation solutionsSupport enterprise IAM capabilities,



including identity lifecycle management, provisioning, deprovisioning, authentication, authorization, federation, SSO, MFA, conditional access, and integration with Active Directory, Entra ID, LDAP, HR systems, cloud services, and business applicationsDrive Identity Governance and Administration (IGA) initiatives by supporting access request workflows, certifications, access reviews, RBAC, ABAC, segregation of duties, joiner-mover-leaver processes, entitlement management, role governance, and remediation of access-control risksManage and support enterprise PKI services, including certificate authorities, certificate lifecycle management, issuance, renewal, deployment, monitoring, revocation, SSL/TLS troubleshooting, key management, and protection of cryptographic assets across on-premises and cloud environmentsMonitor, analyze, and resolve identity and access-related incidents, performing root cause analysis, vulnerability remediation, platform health monitoring, security reviews, and continuous improvement activities to strengthen the organization's security postureSupport audit, compliance, and governance requirements by maintaining audit-ready documentation, evidence collection, reporting, control validation, SOX compliance activities, access certifications, privileged access reviews, and adherence to security frameworks and regulatory standardsCollaborate with security, infrastructure, application, compliance, audit,



and business teams to enhance PAM, IAM, IGA, and PKI programs, while maintaining technical documentation, runbooks, training materials, change management activities, disaster recovery processes, and awareness of emerging cybersecurity trends and best practicesPOSITION

REQUIREMENTS:
Minimum High School Diploma or GED, OR an equivalent combination of education and relevant experience in Cybersecurity, Identity & Access Management (IAM), Privileged Access Management (PAM), Identity Governance (IGA), Public Key Infrastructure (PKI), or related technology disciplines10+ years of experience in Cybersecurity, Identity & Access Management, Privileged Access Management, Identity Governance, or related security disciplinesExperience administering CyberArk PAM solutions within large, complex enterprise environmentsHands‑on experience with IAM and IGA platforms such as SailPoint, Saviynt, Microsoft Entra ID, Okta, Ping Identity, including identity lifecycle management, access provisioning, access certifications, RBAC, and segregation‑of‑duties controlsExperience supporting PKI and certificate lifecycle management, including SSL/TLS certificates, Microsoft Certificate Services, public certificate authorities, cryptographic security controls, and identity integrations using Active Directory, Entra ID/Azure AD, LDAP, cloud platforms, applications, databases, and network devicesProficiency with PowerShell, Python, REST APIs, automation tools, authentication protocols (SAML, OAuth 2.0, OpenID Connect, Kerberos, RADIUS, SCIM), and experience supporting audit, compliance, and SOX requirements; industry certificationssuch as CyberArk Defender, CyberArk Sentry, CISSP, CISM, Security+, Microsoft Identity, SailPoint, or PKI‑relat

📌 Senior Security Engineer (Winnipeg)
🏢 Canadian Pacific Railway
📍 Winnipeg