Senior PAM Specialist

Scotiabank; Toronto; On-site; CAD 110,000 - 160,000; Full time

Benefits offered by this job

Diversity & Inclusion programs

Accessibility and workplace accomod.

Tuition assistance for upskilling

Bonus and benefits from day one

Community engagement and ERGs

Job summary

Scotiabank is seeking a Senior PAM Specialist to lead and support a modernization initiative for privileged access management. You will design, implement, and optimize PAM solutions across the enterprise, with hands-on deployment experience and a deep understanding of modern PAM practices.

You will architect scalable PAM systems, upgrade legacy CyberArk components, integrate with AD, SIEM, DevOps pipelines, and cloud platforms, and mentor junior engineers while ensuring compliance and robust

Qualifications

• 7+ years of hands-on experience with PAM solutions.
• Proven experience in PAM architecture, deployment, and modernization projects.
• Strong understanding of privileged access risks, controls, and best practices.
• Proficiency in scripting (PowerShell, Python) and REST APIs.
• Experience with cloud platforms (AWS, Azure, GCP) and hybrid environments.
• Familiarity with DevOps tools (Jenkins, Ansible, Terraform) and secrets management.
• CyberArk certifications (Defender, Sentry, Guardian) are highly desirable.
• Experience with CyberArk Conjur or Secrets Hub in containerized environments.
• Knowledge of identity governance and broader IAM concepts.
• Strong communication and documentation skills.

Responsibilities

• Lead the design and architecture of PAM solutions aligned with modernization goals.
• Develop scalable, secure PAM architectures including high availability and disaster recovery.
• Define PAM blueprints, reference architectures, and integration patterns.
• Drive upgrades and migrations of legacy CyberArk components to modern versions.
• Implement CyberArk modules such as PSM, AAM, Conjur, and Secrets Manager.
• Integrate CyberArk with enterprise systems (AD, SIEM, ITSM, DevOps, cloud).
• Establish and enforce PAM policies, workflows, and lifecycle management.
• Automate onboarding/offboarding of privileged accounts using REST APIs and scripting.
• Monitor CyberArk performance, conduct health checks, and vault hardening.
• Ensure configurations meet regulatory and internal compliance (SOX, PCI-DSS, ISO 27001).
• Conduct risk assessments and implement controls against privileged access threats.
• Collaborate with audit/compliance for evidence collection and reporting.
• Work with IAM, Infra, Cloud, App teams to align PAM strategies.
• Provide technical leadership and mentoring to junior PAM engineers.
• Participate in governance forums and PAM roadmap development.

Skills

PAM

PAM architecture

Scripting

REST APIs

Cloud platforms

DevOps tooling

CyberArk certifications

Container security

Tools

PAS

CPM

PVWA

PTA

EPM

CyberArk Conjur

Secrets Hub

Jenkins

Ansible

Terraform

Job description

Select how often (in days) to receive an alert:

Select how often (in days) to receive an alert:

Please be advised that our Careers site will be unavailable from November 28 at 12am ET to November 29 12am ET for scheduled system maintenance.

Title: Senior PAM Specialist

Requisition ID: 269143
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

We are seeking a highly skilled Senior PAM Specialist to lead and support a strategic PAM modernization initiative. This role will be responsible for designing, implementing, and optimizing PAM solutions to enhance privileged access security across the enterprise. The ideal candidate will have deep expertise in PAM architecture, hands‑on deployment experience, and a strong understanding of modern PAM practices, integrations, and automation

Is this role right for you? In this role, you will:

• Lead the design and architecture of PAM solutions aligned with modernization goals.
• Develop scalable, secure, and resilient PAM architectures including high availability, disaster recovery, and cloud integrations.
• Define and document PAM blueprints, reference architectures, and integration patterns.
• Drive the upgrade and migration of legacy CyberArk components to modern versions (e.g., PAS, CPM, PVWA, PTA, EPM).
• Implement CyberArk modules such as PSM, AAM, Conjur, and Secrets Manager.
• Integrate CyberArk with enterprise systems (e.g., Active Directory, SIEM, ITSM, DevOps pipelines, cloud platforms).
• Establish and enforce PAM policies, workflows, and lifecycle management for privileged accounts.
• Automate onboarding/offboarding of privileged accounts using REST APIs and scripting (PowerShell, Python).
• Monitor and tune CyberArk performance, conduct health checks, and manage vault hardening.
• Ensure CyberArk configurations meet regulatory and internal compliance requirements (e.g., SOX, PCI‑DSS, ISO 27001).
• Conduct risk assessments and implement controls to mitigate privileged access threats.
• Collaborate with audit and compliance teams to support evidence collection and reporting.
• Work closely with IAM, Infrastructure, Cloud, and Application teams to align PAM strategies.
• Provide technical leadership and mentoring to junior PAM engineers and administrators.
• Participate in governance forums and contribute to PAM roadmap development.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• 7+ years of hands‑on experience with PAM solutions.
• Proven experience in PAM architecture, deployment, and modernization projects.
• Strong understanding of privileged access risks, controls, and best practices.
• Proficiency in scripting (PowerShell, Python) and REST APIs.
• Experience with cloud platforms (AWS, Azure, GCP) and hybrid environments.
• Familiarity with DevOps tools (Jenkins, Ansible, Terraform) and secrets management.
• CyberArk certifications (e.g., Defender, Sentry, Guardian) are highly desirable
• Experience with CyberArk Conjur or Secrets Hub in containerized environments.
• Knowledge of identity governance and broader IAM concepts.
• Strong communication and documentation skills.
• Ability to work independently and manage multiple priorities in a fast‑paced environmen

What's in it for you?

• Diversity, Equity, Inclusion & Allyship-We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias‑free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employees to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations- We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskillingthrough online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

Job Segment: Cloud, Software Engineer, Compliance, Equity, Law, Technology, Engineering, Legal, Finance