Senior PAM Engineering Specialist

Overview
Permanent Full‑time position. This role is part of the Identity and Access Management group, responsible for designing, implementing, and operating privileged access management (PAM) solutions across Canada Life.

Responsibilities

Design, implement, and maintain enterprise PAM solutions (e.g., Cyber Ark, Beyond Trust, Delinea, Microsoft Entra ).

Develop secure architectures for privileged identity lifecycle management, credential vaulting, session management, and least privilege enforcement.

Lead PAM platform upgrades, integrations, and modernization initiatives across on‑premises and cloud environments.

Implement role‑based, just‑in‑time (JIT) and Zero Standing Privileges (ZSP) access models to minimize standing privileges.

Define and enforce PAM standards, patterns, and best practices.

Develop and maintain automation workflows (scripts, APIs, pipelines) for onboarding accounts, credential rotation, and access provisioning.

Integrate PAM solutions with enterprise systems including Active Directory, Azure AD / Entra , cloud platforms (AWS, GCP), Dev Ops tools, and applications.

Provide L3 engineering support for complex PAM incidents and issues.

Act as a subject matter expert (SME) for PAM within the organization.

Mentor junior engineers and guide cross‑functional teams.

Collaborate with security, infrastructure, application, and cloud teams to drive PAM adoption.

Contribute to roadmap planning and strategic initiatives for identity security.

Qualifications

5 years of experience in the administration of PAM solutions.

Degree or equivalent education in Computer Science, Business Computing, Engineering, or Commerce.

Minimum of 3 years experience designing, implementing, and troubleshooting Cyber Ark PASM, Cyber Ark Secret Manager, or any other related PAM solution.

2 years experience implementing Just‑in‑Time and Zero Standing Privileged Access.

Strong understanding of REST API, OAuth, JWT, and experience setting up applications to retrieve secrets from the vault.

Experience in scripting (Bash, Python, Power Shell) is an added advantage.

Advanced problem‑solving and analytical skills.

Strong communication and stakeholder management abilities.

Strategic thinking with a hands‑on technical mindset.

Ability to lead initiatives and influence security practices across the organization.

Attention to detail with a strong focus on security and compliance.

Compensation
Base salary:  $100,800 - $130,800  annually. This represents base salary only.

Benefits

Career Development:
Opportunities for advancement, access to industry‑leading learning programs, and up to $2,000 annually towards education reimbursement.

Health & Wellness:
Flexible health and dental benefits, plus a $5,000 mental health benefit.

Time Off:
Regular vacation and personal days, plus support for community volunteer days.

Financial Security:
Company‑matching pension plan, share ownership program, and additional investment options.

Rewards and Recognition:
Employee recognition programs, service milestone celebrations, employee discounts, and more.

Community Emphasis:
Workplace support through Employee Resource Groups, mentorship programs, social clubs, and events.

Equal Opportunity Statement
Canada Life would like to thank all applicants; however, only those who qualify for an interview will be contacted. For applicants requiring reasonable accommodation during the application process, please contact talentacq All information provided will be handled in accordance with applicable laws and Canada Life policies.

#J-18808-Ljbffr