Senior IAM Engineer - PAM

Refinitiv; Toronto; Hybrid; CAD 100,000 - 140,000; Full time

Job summary

A leading company in legal and information services is seeking a Senior IAM Engineer specialized in Privileged Access Management (PAM). This role involves engaging with automation, CyberArk integration, and strategies to enhance IAM security solutions across diverse environments. Candidates should have significant experience in identity management and a passion for cybersecurity, with opportunities for professional development within a flexible work model.

Benefits

Flexible hybrid working environment

Career development and growth

Comprehensive benefit plans

Mental Health Days off

Opportunities for community involvement

Qualifications

• 5+ years of experience in Identity & Access Management.
• Deep fluency with Identity & Directory platforms.
• Experience with automation and scripting technologies.

Responsibilities

• Integrate various platforms with CyberArk and automate workflows.
• Develop, maintain, and monitor PAM solutions.
• Lead architecture and design of enterprise IAM solutions.

Skills

Identity Management

CyberArk

Automation

Cloud Infrastructure

Education

Bachelor's degree in Computer Science or related field

Tools

CyberArk PAS platform

SAML

LDAP

OAuth

Job description

Senior IAM Engineer - PAM page is loaded

Senior IAM Engineer - PAM

Apply remote type Remote Job: Hybrid locations CAN-Toronto-19 Duncan Street time type Full time posted on Posted Yesterday time left to apply End Date: July 18, 2025 (30 days left to apply) job requisition id JREQ189815

Thomson Reutersis looking for a skilled Information Senior Identity & Access Management Engineer for Privileged Access Management (PAM).

Be part of an exciting, fast-paced environment that will help Thomson Reuters to continue to be a leader delivering trusted content and technology that professionals and institutions need to make the right decisions. In this role, you will be responsible for assisting with engineering, operations, and monitoring of various PAM security solutions and infrastructure.

PAM is a strategic focus for Thomson Reuters and a cornerstone of the holistic IAM information security program. The successful candidate for this role will deliver PAM/CyberArk subject matter expertise and lead specific projects supporting the company’s overall PAM strategy.

About the role:

In the role of Senior Identity & Access Management Engineer – PAM, you will:

• Integrate various platforms with CyberArk, such as different LDAP providers, Windows servers, UNIX servers, Databases and networking Devices, middleware, etc.
• Be hands-on with the automation & DevOps infrastructure of CyberArk multi-component products in a complex multi-platform environment
• Develop and maintain solutions responsible for Workstation PAM, Server PAM (covering On-Prem and Cloud infrastructure) and Secrets Management
• Build user-friendly processes for business consumption with an automated first approach
• Work across internal and external teams to document and share IAM best practices for employees and contractors.
• Provide support and guidance to the internal IAM Team.
• Develop, maintain, monitor, and publish appropriate performance statistics and impact metrics.
• Develop and maintain documentation, with a focus on self-service.
• Ability to provide complex information security IAM risks and technical requirements into business digestible language.
• Credential vaulting processes for various platforms and environments.
• Assist with the architecture and design of identity solutions for the enterprise in a large and distributed environment.
• Lead architecture, planning, and hands-on delivery of the enterprise-level IAM program, particularly privileged access management.
• Work across internal and external teams to document and share IAM best practices for employees and contractors.
• Ensure overall IT strategy and architecture plans and standards are translated into IAM service programs, methods, and technologies and alignment with industry-leading IAM practices.
• Advise Senior Management on PAM and IAM-related risks and security posture.
• Provide leadership and hands-on guidance to the internal IAM PAM Team.
• Participate and gather information for periodic compliance exercises for SOX and SOC security standards.
• Troubleshoot and resolve complex technical problems impacting other teams using the PAM solution.
• Ability to provide complex information security IAM risks and technical requirements into business digestible language.

About you:

You are a fit for the Senior Identity & Access Management Engineer – PAM role if you have…

• A deep fluency with Identity & Directory platforms and authentication technologies such as CyberArk, BeyondTrust, Delinea, SAML, LDAP, LAPS, SCIM, OAuth, SailPoint, and Microsoft Active Directory.
• Experience with solutions covering Workstation PAM, Server PAM (On-Prem and Cloud infrastructure) and Secrets Management
• Experience with the scripting technologies and tools that drive automation and enable product teams and end-users to move towards self-service
• Experience in the using/automating CyberArk Web Service APIs / SDK
• Experience installing, configuring and customizing the CyberArk PAS platform and its components (PVWS, CPM, PSM, PTA, AAM, etc.)
• Experience onboarding applications for password integration with a password manager
• Experience operating within a 24x7 operational service.
• Experienced in day-to-day operational support in adding and deleting accounts, applying policies, assigning safes, synchronizing failed accounts, and Password rotations.
• A passion for solving problems and delivering high-quality solutions.
• 5+ years of experience in Identity & Access Management
• Authentication capability for cloud-based applications and infrastructure.
• Ability to think strategically, balancing long and short-term priorities.
• Experience working in Azure, GCP and AWS.
• Sense for automation.

#LI-MW1

What’s in it For You?

• Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.

• Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.

• Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.

• Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.

• Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.

• Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives.

• Making a Real-World Impact:We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.

About Us

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.

We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.

We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation here .

Learn more on how to protect yourself from fraudulent job postings here .

More information about Thomson Reuters can be found on thomsonreuters.com.

Similar Jobs (2)

Senior Site Reliability Engineer AWS, Monitoring tool Rqdd

remote type Remote Job: Hybrid locations CAN-Toronto-19 Duncan Street time type Full time posted on Posted 7 Days Ago

Senior AI Solutions Engineer

remote type Remote Job: Hybrid locations CAN-Toronto-19 Duncan Street time type Full time posted on Posted 30+ Days Ago