Sr. JD Edwards User Security & CNC Administrator

PCI Pharma Services•Philadelphia, PA

9d•Remote

About The Position

PCI Pharma Services is hiring a Sr. JD Edwards User Security & CNC Administrator to administer JD Edwards EnterpriseOne user access, security controls, and CNC operations. The role manages user accounts and permissions throughout the employee lifecycle, maintains role-based access, supports access reviews and segregation-of-duties activities, and produces documentation and evidence for management and audit purposes. It also serves as a point of contact for JDE security questions and works with IT teams, service desk staff, business process owners, managers, and system owners. The position additionally supports CNC operations, including package builds and deployments, object promotions, path codes, OCM mappings, data sources, environments, kernels, and server services. Responsibilities include troubleshooting application, web, batch-processing, authentication, performance, and connectivity issues, as well as supporting upgrades, patches, ESUs, tools releases, disaster-recovery testing, and environment refreshes. The role contributes to JDE projects and ongoing improvements to security administration processes. The position is primarily work from home. Working hours may need to be adjusted to meet business needs, and periodic travel to PCI sites globally may be required. The jobholder must follow PCI procedures and applicable health, safety, environmental, privacy, and regulatory requirements, including GDPR and GMP.

Requirements

At least 7 years supporting JD Edwards EnterpriseOne, including substantial hands-on security and CNC administration experience.
Experience administering EnterpriseOne 9.2 across development, test, and production environments.
Strong knowledge of JD Edwards EnterpriseOne security architecture and Security Workbench functionality, including UDO security.
Strong knowledge of EnterpriseOne CNC architecture, including Enterprise Server, HTML Server, Deployment Server, and Server Manager.
Understanding of EnterpriseOne tables, UBE processing, package deployment, object management, OMW, data sources, and OCM.
Ability to investigate logs, identify root causes, and resolve complex technical or access-related issues.
Good understanding of identity and access management, authentication, password controls, privileged access, and service accounts.
Working knowledge of supported operating systems, databases, web/application servers, and networking concepts.
Understanding of internal controls, GDPR, audit requirements, segregation of duties, and security risk management.
Strong analytical skills and ability to balance operational needs with security and compliance controls.
Clear written and verbal communication, including ability to explain technical or security issues to business stakeholders.
Ability to prioritise competing incidents, requests, projects, and planned maintenance in a global support environment.
Strong attention to detail, documentation discipline, and commitment to controlled change.
Ability to work independently, lead technical investigations, and guide less-experienced colleagues.
Bachelor’s degree or equivalent professional experience in Information Systems, Computer Science, Cybersecurity, Business Systems, or a related discipline.
Professional training or certification in JD Edwards EnterpriseOne administration, CNC, or security, or equivalent hands-on expertise gained through significant experience.
Ability to adjust working hours to meet business needs.
Periodic travel to other PCI group sites and locations globally may be required.

Nice To Haves

Hands-on experience with ALLOut Security for JD Edwards, including user provisioning, role design and maintenance, security reporting, segregation-of-duties analysis, access reviews, risk remediation, and audit evidence.
Experience supporting IBM i (iSeries/AS400) environments and Db2 for i databases, including administration, monitoring, performance troubleshooting, and integration with JD Edwards EnterpriseOne.
Experience in a regulated GxP pharmaceutical and SOX-compliant environment, including knowledge of validated systems, data integrity, controlled change, documented procedures, segregation of duties, access governance, audit evidence, and IT general controls.
Oracle JD Edwards EnterpriseOne certification or formal training, particularly in CNC, system administration, security, or current Tools releases.
Recognised information-security or governance certification, such as CISSP, CISM, CISA, CRISC, or CompTIA Security+.
Identity and access management certification or training covering access governance, privileged-access management, or role engineering.
ITIL Foundation or a comparable IT service-management qualification.
Training or certification in ALLOut Security for JD Edwards, including security reporting, user provisioning, role management, and segregation-of-duties analysis.
Formal training in GxP, GMP, computerised-system validation, data integrity, or 21 CFR Part 11 controls.
Knowledge of SOX compliance and ITGC testing, supported by relevant audit, risk, or compliance training.

Responsibilities

Create, amend, disable, and remove JDE user accounts according to approved processes and manage access through employee joiner, mover, and leaver changes.
Assign and maintain JDE roles, responsibilities, menus, environments, and security permissions; process and validate access requests and ensure business approval before changes.
Maintain accurate records of user access, approvals, and security changes, and investigate and resolve access and authentication issues.
Administer EnterpriseOne security for users, roles, applications, menus, UDOs, and security configuration; maintain role-based controls and support least-privilege access.
Monitor and review security settings and access assignments, help design and maintain roles as business needs change, and support security changes for new functionality, enhancements, projects, and upgrades.
Identify inappropriate, excessive, or conflicting access and escalate issues where appropriate.
Support user access reviews, certifications, segregation-of-duties reviews, and remediation; produce access and security reports and audit evidence.
Support internal and external audits and ensure security administration complies with company policies, procedures, and applicable regulatory requirements.
Contribute to continuous improvement of JDE security controls and processes.
Act as a point of contact for JDE user security queries and work with Service Desk and IT teams to resolve access-related incidents and requests.
Liaise with business process owners, managers, and system owners to understand access needs, assign appropriate roles, and communicate security requirements and procedures.
Maintain JDE security procedures, work instructions, role documentation, and access documentation.
Identify opportunities to improve the efficiency, control, and automation of security administration; support standardised processes.
Contribute to JDE projects, upgrades, integrations, and other initiatives affecting security and access management.
Support CNC operations, including package builds and deployments, object promotions, path codes, OCM mappings, data sources, environments, kernels, and server services.
Troubleshoot EnterpriseOne application, web, batch-processing, authentication, performance, and connectivity issues.
Support upgrades, patches, ESUs, tools releases, disaster-recovery testing, and environment refreshes.
Adhere to PCI SOPs, health, safety, and environmental rules, GDPR, GMP, and other applicable regulatory guidelines.