Senior PAM & IAM Engineer — Automation & Privileged Access

Broadridge; Canada; Remote; CAD 110,000 - 150,000; Full time

Job summary

Broadridge is seeking a highly experienced Senior Identity & Access Management (IAM) / Privileged Access Management (PAM) Engineer to advance its BeyondTrust PAM program. You will lead onboarding of infrastructure platforms, apps, databases, service accounts, and privileged accounts, collaborating with security, infrastructure, and application teams to deliver scalable, compliant solutions.

The role requires hands-on PAM implementation, strong automation skills with PowerShell, Python, and REST

Qualifications

• 9+ years in Identity & Access Management, Privileged Access Management, Cybersecurity Engineering, or Infrastructure Engineering.
• 3+ years hands-on PAM experience.
• Experience with BeyondTrust (preferred) or equivalent PAM platforms such as CyberArk, Delinea, or HashiCorp Vault.
• Strong understanding of privileged account management, credential vaulting, password rotation, least privilege, and access governance principles.
• Experience supporting Windows Server, Active Directory, Linux/Unix, and enterprise infrastructure platforms.
• Experience working with SQL Server, Oracle, or other enterprise database technologies.
• Strong scripting and automation skills using PowerShell, Python, Bash and REST APIs.
• Previous BeyondTrust implementation or migration experience.
• Experience integrating PAM solutions with Active Directory, LDAP, SAML, OIDC, MFA, and cloud platforms.
• Familiarity with AWS, Azure, and hybrid cloud environments.
• Experience supporting SOX, PCI, SOC, or other regulated environments.
• Security certifications such as CISSP, CISM, Security+, or equivalent.

Responsibilities

• PAM Engineering & Administration • Lead end-to-end onboarding of servers, applications, databases, service accounts, and privileged accounts into BeyondTrust PAM.
• Configure and administer BeyondTrust Password Safe, Secrets Safe, Privileged Remote Access (PRA), and related PAM capabilities.
• Implement credential vaulting, password rotation, privileged access controls, session management, and approval workflows.
• Conduct account discovery, onboarding assessments, dependency reviews, and remediation planning.
• Support onboarding across Windows, Linux/Unix, Active Directory, databases, cloud platforms, and enterprise infrastructure technologies.
• Troubleshoot authentication, authorization, connectivity, and integration issues.
• Automation & Integration • Develop and support automation solutions using PowerShell, Python, REST APIs, and related technologies.
• Build integrations between PAM solutions and enterprise systems.
• Identify opportunities to streamline onboarding, provisioning, reporting, and operational processes through automation.

Skills

PAM

Automation

PowerShell

Python

REST APIs

Active Directory

Linux/Unix

Tools

BeyondTrust

CyberArk

Delinea

HashiCorp Vault

SQL Server

Oracle

Job description

Broadridge is seeking a highly experienced Senior Identity & Access Management (IAM) / Privileged Access Management (PAM) Engineer to advance its BeyondTrust PAM program. You will lead onboarding of infrastructure platforms, apps, databases, service accounts, and privileged accounts, collaborating with security, infrastructure, and application teams to deliver scalable, compliant solutions.

The role requires hands-on PAM implementation, strong automation skills with PowerShell, Python, and REST