Senior Privileged Access Management Analyst

Sun Life Financial; Waterloo; Hybrid; CAD 84,000 - 138,000; Full time

Job summary

A leading financial services company in Waterloo is seeking a Sr. Privileged Access Management Analyst. The successful candidate will manage the PAM service, ensuring compliance with security standards and collaborating with teams to enhance IAM security. This role requires expertise in CyberArk and scripting, and offers a hybrid work model. A university degree and experience in the IT security industry are essential.

Benefits

Wellness programs

Flexible work options

Networking opportunities

Qualifications

• 3+ years in security IT industry experience.
• Deep understanding and hands-on experience with CyberArk PAM.
• Proven technical understanding of Identity and Access Management related to PAM.

Responsibilities

• Manage onboarding of new systems into the PAM service.
• Provide guidance on PAM processes and controls.
• Administer password rotations and account management.

Skills

CyberArk Privilege Access Management

Scripting languages (PowerShell, Python)

Active Directory and LDAP

Analytical aptitude

Communication and collaboration

Education

University degree/college diploma in related fields

Tools

CyberArk

REST API

Job description

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

The Sr. Privileged Access Management Analyst will be accountable for ensuring critical global Privileged Access Management (PAM) service meets key service and security objectives, by maintaining sustainable and effective PAM service and security monitoring, investigation and remediation of service and security issues.

Reporting to the Sr. Privileged Access Management (PAM) Manager, within Global Identity Access Management department, the incumbent will collaborate with the IAM team to provide global PAM support for various aspects of privileged access management to all SunLife users. The incumbent will also be responsible for providing guidance, support and continuous improvement advice when evaluating PAM processes and controls as they relate to overall IAM security posture.

What you will do:

• Manage and advise technical support and application teams to assist in the on-boarding of new systems into the PAM service
• Develop and support assurance activities for effective management of privileged access
• Perform PAM administration activities in accordance with security standards to ensure that passwords are accessible to appropriately authorized users only
• Manage the CyberArk environment and dependent technologies, including Enterprise Password
• Manage Vault, Central Password Manager, Password Vault Web Access, Privileged Session Manager, (EPV, PSM, CPM, PTA, PVWA, AIM)
• Troubleshooting system and application accounts in a diverse systems/application architecture
• Administer password rotations, password malfunctions, account creations, account changes, accounts integrations, maintaining/creating new safes, and CyberArk policies
• Managing CyberArk privilege cloud incidents and safe provisioning request.
• Assist with external Projects / Onboarding- gather requirements which would include scope, customization, etc. and account uploads
• Perform account (Vault Internal) administration, monitoring, maintenance and secondary controls
• Accurately maintain all documentation as it relates to configuration, processes, service records, asset inventories, topologies, administration manuals, job instructions, etc.
• Collaborate with Security Access Administration and technical support teams to ensure the service delivered satisfies the end user’s requirement while meeting Governance best practices

What you need to succeed:

• University degree/college diploma in related discipline(s) or equivalent work experience
• 3+ years in security IT industry experience
• Deep understanding and hands-on experience with CyberArk Privilege Access Management
• Familiarity with Active Directory, LDAP, and other directory services for user and group management
• Proficiency in scripting languages like PowerShell or Python for automation and REST API knowledge
• Working knowledge of CyberArk PAM operations: Platform management, safe management, account management and privileged session manager
• Proven technical understanding of Identity and Access Management as it relates to PAM
• Experience in creating and maintaining all documentation relates to PAM's configuration, processes, service records, asset inventories, topologies, administration manuals, job instructions
• Knowledge and experience in supporting CyberArk EPM administration will be great asset to be considered
• Some after hours / on-call support shifts required.
• CyberArk PAM Certification – Defender/Sentry preferred

Preferred Skills:

• This position requires a strong analytical aptitude with the ability to drive solutions to a positive conclusion
• Able to work independently with high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables and build trust with internal clients and peers
• Excellent communication and collaboration skills
• Methodical investigative aptitude to identify key control deficiencies and work towards continuous improvement

What’s in it for you:

• We’re honoured to be recognized as a 2024 Best Workplaces in Ontario by Great Place to Work Canada.
• We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health.
• Wellness programs that support the three pillars of your health – mental, physical, and financial
• The opportunity to move along a variety of career paths with amazing networking potential.
• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office

As a condition of the role, the successful candidate must obtain a Government of Canada Reliability Status security clearance through Sun Life in advance of the start date

Must be able to satisfactorily complete applicable background checks prior to the start date and during employment, in accordance with Sun Life’s policies and practices.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [e-mail] .

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you! Several work options are available and can be discussed throughout the selection process depending on the role requirements and individual needs.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

84,000/84 000 - 138,000/138 000

Job Category:

IT - Technology Services

Posting End Date:

20/08/2025