PAM Developer

Requisition ID: 245479

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The role of the PAM CyberArk Engineering Lead operates within the PAM division of the Global Identity & Access Management (GIAM) team. This valuable member of the team will be responsible for guiding the engineering, delivery, and continuous improvement of the enterprise CyberArk Privileged Access Management (PAM) platform.

Is this role right for you? In this role you will:

• Engineer and support CyberArk PAS (Vault, PVWA, CPM, PSM), EPM, and related components across on‑prem and cloud environments.
• Implement hardening, encryption, secrets lifecycle controls, and standardized safe/role taxonomies.
• Deploy application patches, upgrades, server certificates and patching and engage in vulnerability remediation.
• Build automation, alerts, reports, and tooling using PowerShell and Python.
• Develop custom connectors, plug‑ins, and REST/API integrations to accelerate onboarding.
• Manage vendor and partner engagement (including Service NOW, SIEM, Database, network), tickets, backlog and deliverables.
• Own initiatives end-to-end, drive development, testing, releases, and change risk through disciplined SDLC, automation, and observability.
• Collaborate and guide production support teams during solution deployment, ensuring smooth hand-over and optimal production release.
• Provide L3 technical support to production teams to ensure operational optimality and efficient incident resolution.
• Lead, mentor, and develop engineers and SMEs; foster a high‑performance, results-oriented culture.
• Contribute to the technical direction and multi‑year roadmap for the CyberArk platform.
• Own outcome‑based metrics (availability, resilience, adoption, onboarding throughput, audit readiness) and drive continuous improvement.
• Integrate PAM with identity workflows (e.g., LAM/IdentityIQ via SCIM/API).
• Lead migrations from legacy PAM solutions (e.g., Centrify) to CyberArk CP/CCP.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• 3–5 years experience in Cybersecurity with knowledge of IAM and PAM platforms.
• 3-5 years full-stack software development experience.
• 2–3 years of hands‑on CyberArk PAM engineering in large, regulated enterprises.
• Bachelor (equivalent or higher) degree in computer science or engineering/mathematics discipline.
• Understanding of software development lifecycle and release process (Git/GitOps, CI/CD, environments, code repositories).
• Strong knowledge of CyberArk components (Vault, PVWA, CPM, PSM), HA/DR, safe taxonomy, plug‑in development, PSM connection components, CP/CCP integrations.
• Proven track record leading engineering delivery for security platforms.
• Proficiency in PowerShell and Python; CI/CD pipelines; secure secrets handling; REST/API integrations.
• 2+ years experience with version control (TFS, SVN, Git)
• Experience integrating PAM with LAM/IdentityIQ (SCIM/API) and codifying role mappings and certifications.
• Solid knowledge of Windows/Linux, AD/LDAP, servers, load balancers, databases (Postgres/SQL), and network connectivity patterns.
• Familiarity with IAM/PAM standards, least‑privilege principles, audit evidence, and regulatory obligations in financial services.
• Good oral and written communication skills.
• Ability to work with ambiguity and drive solutions independently.
• Attention to detail and high standards for quality.

Nice to Have:

• Focus on scalable, enterprise-level software system design (both on code and infrastructure levels)
• Passion for driving teams towards high performance and a deep pride in quality craftsmanship.
• Experience within Canadian financial institutions a benefit.
• CyberArk certifications (CDE/Defender, Sentry, Guardian).
• Security certifications such as CISSP or CISM.
• Experience writing and maintaining related documentation.
• Passion for driving teams toward high performance and continuous improvement.

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.