Senior Identity & Access Management (IAM) Engineer (CONTRACT) REMOTE

Broadridge Financial Solutions; Markham; Hybrid; CAD 120,000 - 170,000; Full time

Job summary

Broadridge Financial Solutions in Canada is seeking a Senior Identity & Access Management (IAM) Engineer on a contract basis to drive onboarding of servers, apps, databases and privileged accounts into the BeyondTrust PAM ecosystem. You will partner with infrastructure, applications, databases and security teams to deliver scalable, compliant PAM solutions.

The ideal candidate has 9+ years in IAM/PAM, hands-on BeyondTrust or similar platforms, strong automation skills (PowerShell, Python, REST

Qualifications

• 9+ years of experience in Identity & Access Management, Privileged Access Management, Cybersecurity Engineering, or Infrastructure Engineering.
• 3+ years of hands-on PAM experience.
• Experience with BeyondTrust (preferred) or equivalent PAM platforms such as CyberArk, Delinea, or HashiCorp Vault.
• Strong understanding of privileged account management, credential vaulting, password rotation, least privilege, and access governance principles.
• Experience supporting Windows Server, Active Directory, Linux/Unix, and enterprise infrastructure platforms.
• Experience working with SQL Server, Oracle, or other enterprise database technologies.
• Strong scripting and automation skills using PowerShell, Python, Bash and REST APIs.
• Previous BeyondTrust implementation or migration experience.
• Experience integrating PAM solutions with Active Directory, LDAP, SAML, OIDC, MFA, and cloud platforms.
• Familiarity with AWS, Azure, and hybrid cloud environments.
• Experience supporting SOX, PCI, SOC, or other regulated environments.
• Security certifications such as CISSP, CISM, Security+, or equivalent.

Responsibilities

• Lead end-to-end onboarding of servers, applications, databases, service accounts, and privileged accounts into BeyondTrust PAM.
• Configure and administer BeyondTrust Password Safe, Secrets Safe, Privileged Remote Access (PRA), and related PAM capabilities.
• Implement credential vaulting, password rotation, privileged access controls, session management, and approval workflows.
• Conduct account discovery, onboarding assessments, dependency reviews, and remediation planning.
• Support onboarding across Windows, Linux/Unix, Active Directory, databases, cloud platforms, and enterprise infrastructure technologies.
• Troubleshoot authentication, authorization, connectivity, and integration issues.
• Develop and support automation solutions using PowerShell, Python, REST APIs, and related technologies.
• Build integrations between PAM solutions and enterprise systems.
• Identify opportunities to streamline onboarding, provisioning, reporting, and operational processes through automation.

Skills

Identity & Access Management

Privileged Access Management

Automation

PowerShell

Python

REST APIs

Tools

BeyondTrust

CyberArk

Delinea

HashiCorp Vault

Job description

## Senior Identity & Access Management (IAM) Engineer (CONTRACT) REMOTEApply: Markham, ON: Hyderabad-Hi-Tec City: Ontario-Home Office: Vancouver - 555 Burrard Street: Ottawa - Home Office: Full time: Posted Today: JR1086380At Broadridge, we've built a culture where the highest goal is to empower others to accomplish more. If you’re passionate about developing your career, while helping others along the way, come join the Broadridge team.Broadridge is Growing. We are seeking a highly experienced **Senior Identity & Access Management (IAM) / Privileged Access Management (PAM) Engineer** to support the enterprise expansion of our BeyondTrust PAM program. This hands-on engineering role will drive the onboarding of infrastructure platforms, applications, databases, service accounts, and privileged accounts into the PAM ecosystem while partnering with technology teams to strengthen security controls and reduce privileged access risk.The successful candidate will independently lead onboarding workstreams from requirements gathering through production implementation, collaborating with infrastructure, application, database, and security teams to deliver scalable, compliant, and operationally sustainable solutions. This role requires strong technical expertise in PAM technologies, infrastructure engineering, automation, and stakeholder engagement, along with the ability to manage multiple initiatives and drive successful outcomes in a fast-paced environment. **Key Responsibilities:****PAM Engineering & Administration*** Lead end-to-end onboarding of servers, applications, databases, service accounts, and privileged accounts into BeyondTrust PAM.* Configure and administer BeyondTrust Password Safe, Secrets Safe, Privileged Remote Access (PRA), and related PAM capabilities.* Implement credential vaulting, password rotation, privileged access controls, session management, and approval workflows.* Conduct account discovery, onboarding assessments, dependency reviews, and remediation planning.* Support onboarding across Windows, Linux/Unix, Active Directory, databases, cloud platforms, and enterprise infrastructure technologies.* Troubleshoot authentication, authorization, connectivity, and integration issues.**Automation & Integration*** Develop and support automation solutions using PowerShell, Python, REST APIs, and related technologies.* Build integrations between PAM solutions and enterprise systems.* Identify opportunities to streamline onboarding, provisioning, reporting, and operational processes through automation. **Qualifications:*** 9+ years of experience in Identity & Access Management, Privileged Access Management, Cybersecurity Engineering, or Infrastructure Engineering.* 3+ years of hands-on PAM experience.* Experience with BeyondTrust (preferred) or equivalent PAM platforms such as CyberArk, Delinea, or HashiCorp Vault.* Strong understanding of privileged account management, credential vaulting, password rotation, least privilege, and access governance principles.* Experience supporting Windows Server, Active Directory, Linux/Unix, and enterprise infrastructure platforms.* Experience working with SQL Server, Oracle, or other enterprise database technologies.* Strong scripting and automation skills using PowerShell, Python, Bash and REST APIs.* Previous BeyondTrust implementation or migration experience.* Experience integrating PAM solutions with Active Directory, LDAP, SAML, OIDC, MFA, and cloud platforms.* Familiarity with AWS, Azure, and hybrid cloud environments.* Experience supporting SOX, PCI, SOC, or other regulated environments.* Security certifications such as CISSP, CISM, Security+, or equivalent.#LI-MR1#LI-REMOTEWe are dedicated to fostering a collaborative, engaging, and inclusive environment and are committed to providing a workplace that empowers associates to be authentic and bring their best to work. We believe that associates do their best when they feel safe, understood, and valued, and we work diligently and collaboratively to ensure Broadridge is a company—and ultimately a community—that recognizes and celebrates everyone’s unique perspective.**Use of AI in Hiring**As part of the recruiting process, Broadridge may use technology, including artificial intelligence (AI)-based tools, to help review and evaluate applications. These tools are used only to support our recruiters and hiring managers, and all employment decisions include human review to ensure fairness, accuracy, and compliance with applicable laws. Please note that honesty and transparency are critical to our hiring process. Any attempt to falsify, misrepresent, or disguise information in an application, resume, assessment, or interview will result in disqualification from consideration.