Sr. JD Edwards User Security & CNC Administrator

PCI Pharma Services•Rockford, IL

8d•Remote

About The Position

PCI Pharma Services is seeking a Sr. JD Edwards User Security & CNC Administrator to administer user access and security for JD Edwards EnterpriseOne and support related CNC operations. The role manages user accounts through the employee lifecycle; assigns and maintains roles, permissions, menus, and environments; validates approved access requests; maintains access records; and investigates access and authentication issues. It also administers EnterpriseOne security configuration, promotes least-privilege access, reviews access assignments, supports security changes for new functionality and upgrades, and identifies inappropriate, excessive, or conflicting access. The position supports governance, risk, and compliance activities, including access reviews, segregation-of-duties reviews, reporting, audit evidence, and internal and external audits. The administrator works with the Service Desk, IT teams, business process owners, managers, and system owners to resolve incidents, define access needs, and communicate security procedures. The role also maintains security documentation, improves administration processes, and contributes to JDE projects, upgrades, integrations, and initiatives. Other CNC responsibilities include supporting package builds and deployments, object promotions, path codes, OCM mappings, data sources, environments, kernels, and server services. The administrator troubleshoots EnterpriseOne application, web, batch-processing, authentication, performance, and connectivity issues, and supports upgrades, patches, ESUs, tools releases, disaster-recovery testing, and environment refreshes. This is primarily a work-from-home position. The jobholder may need to adjust working hours to meet business needs and may periodically travel to PCI group sites globally. The jobholder is responsible for adhering to PCI SOPs, health, safety and environmental rules, GDPR, GMP, and other regulatory guidelines.

Requirements

At least 7 years supporting JD Edwards EnterpriseOne, including substantial hands-on security and CNC administration experience.
Experience administering EnterpriseOne 9.2 across development, test, and production environments.
Strong knowledge of JD Edwards EnterpriseOne security architecture and Security Workbench functionality, including UDO security.
Strong knowledge of EnterpriseOne CNC architecture, including Enterprise Server, HTML Server, Deployment Server, and Server Manager.
Understanding of EnterpriseOne tables, UBE processing, package deployment, object management, OMW, data sources, and OCM.
Ability to investigate logs, identify root causes, and resolve complex technical or access-related issues.
Good understanding of identity and access management, authentication, password controls, privileged access, and service accounts.
Working knowledge of supported operating systems, databases, web/application servers, and networking concepts.
Understanding of internal controls, GDPR, audit requirements, segregation of duties, and security risk management.
Strong analytical skills and ability to balance operational requirements with security and compliance controls.
Clear written and verbal communication skills, including the ability to explain technical or security issues to business stakeholders.
Ability to prioritize competing incidents, requests, projects, and planned maintenance in a global support environment.
Strong attention to detail, disciplined documentation practices, and commitment to controlled change.
Ability to work independently, lead technical investigations, and guide less-experienced colleagues.
Bachelor’s degree or equivalent professional experience in Information Systems, Computer Science, Cybersecurity, Business Systems, or a related discipline.
Professional training or certification in JD Edwards EnterpriseOne administration, CNC, or security, or equivalent hands-on expertise gained through significant experience.

Nice To Haves

Hands-on experience with ALLOut Security for JD Edwards, including user provisioning, role design and maintenance, security reporting, segregation-of-duties analysis, access reviews, risk remediation, and audit evidence.
Hands-on experience supporting IBM i (iSeries/AS400) environments and Db2 for i databases, including administration, monitoring, performance troubleshooting, and integration with JD Edwards EnterpriseOne.
Experience in a regulated GxP pharmaceutical and SOX-compliant environment, including knowledge of validated systems, data integrity, controlled change, documented procedures, segregation of duties, access governance, audit evidence, and IT general controls.
Oracle JD Edwards EnterpriseOne certification or formal training, particularly in CNC, system administration, security, or current Tools releases.
Recognized information-security or governance certification, such as CISSP, CISM, CISA, CRISC, or CompTIA Security+.
Identity and access management certification or training covering access governance, privileged-access management, or role engineering.
ITIL Foundation or a comparable IT service-management qualification.
Training or certification in ALLOut Security for JD Edwards, including security reporting, user provisioning, role management, and segregation-of-duties analysis.
Formal training in GxP, GMP, computerized-system validation, data integrity, or 21 CFR Part 11 controls.
Knowledge of SOX compliance and ITGC testing, supported by relevant audit, risk, or compliance training.

Responsibilities

Create, amend, disable, and remove JDE user accounts according to approved processes and manage access for joiners, movers, and leavers.
Assign and maintain JDE roles, responsibilities, menus, environments, and security permissions; process access requests only after appropriate business approval.
Maintain accurate records of user access and security changes and investigate access and authentication issues.
Administer EnterpriseOne security for users, roles, applications, menus, UDOs, and security configuration.
Maintain role-based access controls, support least-privilege principles, monitor security settings, and review access assignments.
Assist with security role design and maintenance as business processes and organizational structures change.
Support security changes associated with JDE functionality, enhancements, projects, and system upgrades; identify and escalate inappropriate, excessive, or conflicting access.
Support user access reviews and certification activities, segregation-of-duties reviews and remediation, and the production of access and security reports.
Maintain evidence of access approvals and security changes and support internal and external audits relating to JDE security and user access.
Ensure security administration complies with company policies, procedures, and applicable regulatory requirements, and contribute to improving security controls and processes.
Act as a key point of contact for JDE user security queries and work with Service Desk and IT teams to resolve access-related incidents and requests.
Liaise with business process owners to understand access requirements and ensure appropriate role assignment; advise managers and system owners on JDE access.
Communicate security requirements and access procedures to users and stakeholders.
Maintain JDE security procedures, work instructions, supporting documentation, and role and access documentation.
Identify opportunities to improve the efficiency, control, and automation of security administration and support standardised processes.
Contribute to JDE projects, upgrades, integrations, and initiatives affecting security and access management.
Support CNC operations, including package builds and deployments, object promotions, path codes, OCM mappings, data sources, environments, kernels, and server services.
Troubleshoot EnterpriseOne application, web, batch-processing, authentication, performance, and connectivity issues.
Support upgrades, patches, ESUs, tools releases, disaster-recovery testing, and environment refreshes.
Adhere to PCI SOPs, health, safety and environmental rules, GDPR, GMP, and other regulatory guidelines.