Senior Identity & Access Management (IAM) Engineer

This is a fully remote position, open to applicants in Canada, +1 more country.

📋 Description

• Oversee the comprehensive onboarding process for servers, applications, databases, service accounts, and privileged accounts into BeyondTrust PAM.

• Configure and manage BeyondTrust Password Safe, Secrets Safe, Privileged Remote Access (PRA), and other related PAM functionalities.

• Execute credential vaulting, password rotation, privileged access controls, session management, and approval workflows.

• Perform account discovery, onboarding assessments, dependency reviews, and remediation planning.

• Facilitate onboarding across Windows, Linux/Unix, Active Directory, databases, cloud platforms, and enterprise infrastructure technologies.

• Resolve authentication, authorization, connectivity, and integration issues.

• Create and maintain automation solutions using PowerShell, Python, REST APIs, and relevant technologies.

• Develop integrations between PAM solutions and enterprise systems.

• Identify enhancements to streamline onboarding, provisioning, reporting, and operational processes via automation.

• Independently manage onboarding workstreams from requirements gathering to production implementation.

• Collaborate with infrastructure, application, database, and security teams to provide scalable, compliant, and operationally sustainable solutions.

• Assist in the enterprise expansion of Broadridge's BeyondTrust PAM program while mitigating privileged access risks.

⛳️ Requirements

• A minimum of 9 years of experience in Identity & Access Management, Privileged Access Management, Cybersecurity Engineering, or Infrastructure Engineering.

• At least 3 years of direct PAM experience.

• Familiarity with BeyondTrust or similar PAM platforms such as CyberArk, Delinea, or HashiCorp Vault.

• Strong knowledge of privileged account management, credential vaulting, password rotation, least privilege, and access governance principles.

• Proficient in supporting Windows Server, Active Directory, Linux/Unix, and enterprise infrastructure platforms.

• Experience with SQL Server, Oracle, or other enterprise database technologies.

• Excellent scripting and automation capabilities using PowerShell, Python, Bash, and REST APIs.

• Prior experience with BeyondTrust implementation or migration.

• Experience integrating PAM solutions with Active Directory, LDAP, SAML, OIDC, MFA, and cloud platforms.

• Knowledge of AWS, Azure, and hybrid cloud environments.

• Experience in supporting regulated environments such as SOX, PCI, or SOC.

• Possession of security certifications such as CISSP, CISM, Security+, or equivalent.

🏝️ Benefits

• Full-time employment.

• Options for remote work or home office.

• A collaborative, engaging, and inclusive work environment.

• A workplace culture that encourages associates to be authentic and perform at their best.