Senior PAM Specialist

Posted 22 days ago

scotiabankDallas (TX)
Computer Systems Engineers/ArchitectsComputer Systems Design Services

SENIORITY

Senior

Apply

About the role

Senior PAM SpecialistJoin a purpose driven winning team, committed to results, in an inclusive and high-performing culture. Global Banking and Markets (GBM) is a leading Canadian Capital Markets and Investment Banking business with a growing platform in the US and Latin America, operating globally for over 100 years. Scotiabank's strong U.S. presence provides our clients an important bridge to this key global market for trade and investment flows across the Americas and the world. Global Banking & Markets provides a full range of investment banking, credit and risk management products and services relevant to the financing and strategic development needs of our clients.Be part of an innovative, Global Capital Markets and Investment Banking business with a unique geographic footprint that puts capital to work for our clients across industries! We work together to drive ambition for every future!PurposeWe are seeking a highly skilled Senior CyberArk PAM Specialist to lead and support a strategic CyberArk modernization initiative. This role will be responsible for designing, implementing, and optimizing CyberArk solutions to enhance privileged access security across the enterprise. The ideal candidate will have deep expertise in CyberArk solution design, hands-on deployment experience in a large and complex organization, and a strong understanding of modern PAM practices, integrations, and automation.What You'll DoArchitecture & DesignLead the design and roadmap of CyberArk solutions aligned with modernization goals.Develop scalable, secure, and resilient PAM architectures including high availability, disaster recovery, and cloud integrations.Define and document CyberArk blueprints, reference architectures, and integration patterns.Implementation & ModernizationDrive the upgrade and migration of legacy CyberArk components to modern versions (e.g., PAS, CPM, PVWA, PTA, EPM).Implement CyberArk modules such as PSM, AAM, Conjur, and Secrets Manager.Integrate CyberArk with enterprise systems (e.g., Active Directory, SIEM, ITSM, DevOps pipelines, cloud platforms).Operations & OptimizationEstablish and enforce PAM policies, workflows, and lifecycle management for privileged accounts.Automate onboarding/offboarding of privileged accounts using REST APIs and scripting (PowerShell, Python).Monitor and tune CyberArk performance, conduct health checks, and manage vault hardening.Security & ComplianceEnsure CyberArk configurations meet regulatory and internal compliance requirements (e.g., SOX, PCI-DSS, ISO 27001).Conduct risk assessments and implement controls to mitigate privileged access threats.Collaborate with audit and compliance teams to support evidence collection and reporting.Collaboration & LeadershipWork closely with IAM, Infrastructure, Cloud, and Application teams to align PAM strategies.Provide technical leadership and mentoring to junior PAM engineers and administrators.Participate in governance forums and contribute to PAM roadmap development.What You'll Bring10+ years of hands-on experience with CyberArk PAM solutions. Proven experience in CyberArk architecture, deployment, and modernization projects. Strong understanding of privileged access risks, controls, and best practices. Proficiency in scripting (PowerShell, Python) and CyberArk REST APIs. Experience with cloud platforms (AWS, Azure, GCP) and hybrid environments. Familiarity with DevOps tools (Jenkins, Ansible, Terraform) and secrets management. CyberArk certifications (e.g., Defender, Sentry, Guardian) are highly desirable.Preferred Skills:Experience with CyberArk Conjur or Secrets Hub in containerized environments.Knowledge of identity governance and broader IAM concepts.Strong communication and documentation skills.Ability to work independently and manage multiple priorities in a fast-paced environment.Interested? If your experience is closely related but doesn't align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank! At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and embraced for their differences. That's why we work to grow and diversify talent and engage employees in a performance-oriented culture.Scotiabank wants you to be able to bring your best self to work – and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs.If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted. Scotiabank is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by federal, state, or local law.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this