Senior CyberArk Security Engineer at Manulife in Toronto, ON

Job description

We are looking for an experienced Senior CyberArk Security Engineer to join our global Privileged Access Management (PAM) Engineering team and help strengthen the security, automation, resilience and reliability of our enterprise PAM platform. This is a hands-on engineering role where you will solve complex security and production challenges, build automation and integrations, contribute to platform modernization, and continuously improve how CyberArk services are designed, operated and supported. You will partner with IAM, Security, Cloud, Infrastructure, Network, Operations and application teams across multiple regions. You will take ownership of complex engineering initiatives and production issues while providing technical guidance, sharing knowledge and helping strengthen engineering practices across the team. Position Responsibilities: Design, implement, enhance and support enterprise CyberArk Privileged Access Management solutions. Engineer, configure and troubleshoot CyberArk Digital Vault, PVWA, CPM, PSM, Credential Provider and CCP components. Lead technical activities for CyberArk implementations, upgrades, migrations, infrastructure changes and platform modernization initiatives. Develop and enhance CPM plugins, PSM connectors and application integrations to support evolving business and technology requirements. Integrate applications and enterprise technologies with CyberArk using REST APIs, CCP, Credential Provider and other integration approaches. Build automation using PowerShell, REST APIs, PACLI and other scripting technologies to reduce repetitive manual work, improve consistency and strengthen platform reliability. Serve as a senior technical escalation point for the Operations team, leading investigation and resolution of complex production and CyberArk platform issues. Perform root-cause analysis across application, identity, operating system, network and infrastructure layers, driving issues through investigation, remediation, testing and permanent resolution. Contribute to disaster recovery, patching, vulnerability remediation, platform hardening and lifecycle management activities. Identify and implement opportunities to improve security, automation, resilience, scalability and operational efficiency. Contribute to technical designs, engineering standards, implementation procedures and knowledge documentation. Serve as a CyberArk technical subject-matter expert, contributing to technical design and architecture discussions while mentoring other engineers and sharing engineering best practices. Required Qualifications : Relevant professional experience in cybersecurity, information technology, engineering or a related technical field. A bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems or a related discipline is welcome, but equivalent relevant professional experience is equally valued. Approximately 5+ years of relevant Privileged Access Management or cybersecurity experience, including substantial hands-on CyberArk engineering experience. Experience engineering and supporting core CyberArk components, including Digital Vault, PVWA, CPM and PSM. Experience implementing, upgrading, integrating or enhancing CyberArk environments within enterprise technology environments. Experience integrating CyberArk with applications and enterprise technologies using REST APIs, CCP, Credential Provider or comparable integration approaches. Scripting and automation experience, particularly with PowerShell and REST APIs, with a focus on reducing manual activities and improving platform reliability. Strong troubleshooting and root-cause analysis capabilities across CyberArk, identity, Windows and infrastructure technologies. Knowledge of Windows Server and Active Directory, with exposure to technologies such as Linux/Unix, databases, networking, cloud or other enterprise platforms. Ability to take ownership of complex technical work while collaborating effectively across engineering,