Senior PAM Specialist

Scotiabank • R.C.M.P. Point, MB

6d

About The Position

We are seeking a highly skilled Senior PAM Specialist to lead and support a strategic PAM modernization initiative. This role will be responsible for designing, implementing, and optimizing PAM solutions to enhance privileged access security across the enterprise. The ideal candidate will have deep expertise in PAM architecture, hands-on deployment experience, and a strong understanding of modern PAM practices, integrations, and automation.

Requirements

• 7+ years of hands-on experience with PAM solutions.
• Proven experience in PAM architecture, deployment, and modernization projects.
• Strong understanding of privileged access risks, controls, and best practices.
• Proficiency in scripting (PowerShell, Python) and REST APIs.
• Experience with cloud platforms (AWS, Azure, GCP) and hybrid environments.
• Familiarity with DevOps tools (Jenkins, Ansible, Terraform) and secrets management.
• Knowledge of identity governance and broader IAM concepts.
• Strong communication and documentation skills.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Nice To Haves

• CyberArk certifications (e.g., Defender, Sentry, Guardian) are highly desirable
• Experience with CyberArk Conjur or Secrets Hub in containerized environments.

Responsibilities

• Lead the design and architecture of PAM solutions aligned with modernization goals.
• Develop scalable, secure, and resilient PAM architectures including high availability, disaster recovery, and cloud integrations.
• Define and document PAM blueprints, reference architectures, and integration patterns.
• Drive the upgrade and migration of legacy CyberArk components to modern versions (e.g., PAS, CPM, PVWA, PTA, EPM).
• Implement CyberArk modules such as PSM, AAM, Conjur, and Secrets Manager.
• Integrate CyberArk with enterprise systems (e.g., Active Directory, SIEM, ITSM, DevOps pipelines, cloud platforms).
• Establish and enforce PAM policies, workflows, and lifecycle management for privileged accounts.
• Automate onboarding/offboarding of privileged accounts using REST APIs and scripting (PowerShell, Python).
• Monitor and tune CyberArk performance, conduct health checks, and manage vault hardening.
• Ensure CyberArk configurations meet regulatory and internal compliance requirements (e.g., SOX, PCI-DSS, ISO 27001).
• Conduct risk assessments and implement controls to mitigate privileged access threats.
• Collaborate with audit and compliance teams to support evidence collection and reporting.
• Work closely with IAM, Infrastructure, Cloud, and Application teams to align PAM strategies.
• Provide technical leadership and mentoring to junior PAM engineers and administrators.
• Participate in governance forums and contribute to PAM roadmap development.

Benefits

• Diversity, Equity, Inclusion & Allyship
• Accessibility and Workplace Accommodations
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed