Senior Privileged Access Management (PAM) Engineer / Advisor (10+ years) to lead advisory and engineering efforts using CyberArk, Delinea, and BeyondTrust

Our financial services client is seeking a Senior Privileged Access Management (PAM) Engineer / Advisor (10+ years) to lead advisory and engineering efforts using CyberArk, Delinea, and BeyondTrust across enterprise infrastructure- 40823

Location Address: - Scarborough/Hybrid, 2 days in the office per week.

Contract Duration: 6 Months

Schedule Hours: 9 am-5 pm Monday-Friday; standard 37.5 hrs/week - Possible overtime.

Story Behind the Need

Business group: GIAM - Privileged Access Management -

We are seeking a highly experienced Senior Privileged Access Management (PAM) Engineer / Advisor to support and advance privileged access security across a large, distributed enterprise environment. This role combines deep technical expertise, enterprise advisory responsibilities, and ownership of complex PAM initiatives across infrastructure and application platforms.

Key Responsibilities:

• Privileged Access Management- Administer and support enterprise PAM platforms, including CyberArk, Delinea (Thycotic), and/or Beyond Trust
• Onboard and manage privileged accounts across: Active Directory, Windows, UNIX / Linux, Databases
• Ensure privileged access controls align with least privilege, security, and audit requirements -Active Directory & Identity Expertise
• Provide advanced guidance on Active Directory architecture and privileged access design
• Support and guide Active Directory cleanup and remediation efforts across in scope domains
• Advise on secure group usage, delegation models, and privileged identity hygiene
• Advisory & Stakeholder Engagement
• Serve as a PAM advisor to infrastructure administrators, developers, and technology partners
• Provide recommendations on onboarding strategies, access models, and secure operational practices
• Act as a point of escalation for complex PAM related issues and design decisions
• Initiative Leadership & Execution
• Coordinate work across multiple technical teams to ensure alignment, sequencing, and timely execution
• Balance multiple concurrent efforts while adapting to shifting priorities and organizational needs
• Ensure smooth transition of delivered capabilities into steady state operations, including documentation and knowledge transfer
• Resource Coordination & Technical Direction
• Provide technical direction and mentorship to engineers and administrators contributing to PAM work
• Influence teams and stakeholders through expertise, collaboration, and clear communication
• Support planning and allocation of technical effort to achieve PAM objectives efficiently

Must have requirements:

• 10+ years of technical experience in information technology or information security.
• 5 years of experience in the administration of Privileged Access Management tools like CyberArk, Delinea, and BeyondTrust is required.
• Hands-on experience in access management on technologies like Active Directory, Windows, *NIX, and Databases
• Advance understanding of Active Directory and provide support and guidelines on clean-up efforts for all in-scope domain
• 5 years of experience providing PAM Advisory services to infrastructure administrators, developers, and technology partners

Nice to Have

• Possess proven experience working with a large enterprise distributed computing environment
• Experience analyzing data using Excel
• CyberArk Defender/Sentry certifications

Education: post-secondary degree or diploma preferred.

Best VS. Average Candidate:

The best candidate is someone with experience in banking or FI. Someone who has worked on upgrade projects for PAM who is not a PM.

Candidate Review & Selection

1- Video- 30 mins - Hiring manager and technical team- Behavioral or situational and go through experience, and role overview.

2nd- Video call - 30 mins - Hiring manager and Director - Cultural fit.