Overview Permanent Full‑time position. This role is part of the Identity and Access Management group, responsible for designing, implementing, and operating privileged access management (PAM) solutions across Canada Life.

Responsibilities

Design, implement, and maintain enterprise PAM solutions (e.g., CyberArk, BeyondTrust, Delinea, Microsoft Entra ID PIM).

Develop secure architectures for privileged identity lifecycle management, credential vaulting, session management, and least privilege enforcement.

Lead PAM platform upgrades, integrations, and modernization initiatives across on‑premises and cloud environments.

Implement role‑based, just‑in‑time (JIT) and Zero Standing Privileges (ZSP) access models to minimize standing privileges.

Define and enforce PAM standards, patterns, and best practices.

Develop and maintain automation workflows (scripts, APIs, pipelines) for onboarding accounts, credential rotation, and access ...