You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

The Sr. Privileged Access Management Analyst will be accountable for ensuring critical global Privileged Access Management (PAM) service meets key service and security objectives, by maintaining sustainable and effective PAM service and security monitoring, investigation and remediation of service and security issues.

Reporting to the Sr. Privileged Access Management (PAM) Manager, within Global Identity Access Management department, the incumbent will collaborate with the IAM team to provide global PAM support for various aspects of privileged access management to all SunLife users. The incumbent will also be responsible for providing guidance, support and continuous improvement advice when evaluating PAM processes and controls as they relate to overall IAM security posture.

What you will do:

Manage and advise technical support and application teams to assist in the on-boarding of new systems into the PAM serviceDevelop and support assurance activities for effective management of privileged accessPerform PAM administration activities in accordance with security standards to ensure that passwords are accessible to appropriately authorized users onlyManage the CyberArk environment and dependent technologies, including Enterprise PasswordManage Vault, Central Password Manager, Password Vault Web Access, Privileged Session Manager, (EPV, PSM, CPM, PTA, PVWA, AIM)Troubleshooting system and application accounts in a diverse systems/application architectureAdminister password rotations, password malfunctions, account creations, account changes, accounts integrations, maintaining/creating new safes, and CyberArk policiesManaging CyberArk privilege cloud incidents and safe provisioning request.Assist with external Projects / Onboarding- gather requirements which would include scope, customization, etc. and account uploadsPerform account (Vault Internal) administration, monitoring, maintenance and secondary controlsAccurately maintain all documentation as it relates to configuration, processes, service records, asset inventories, topologies, administration manuals, job instructions, etc.Collaborate with Security Access Administration and technical support teams to ensure the service delivered satisfies the end user’s requirement while meeting Governance best practices

What you need to succeed:

University degree/college diploma in related discipline(s) or equivalent work experience3+ years in security IT industry experienceDeep understanding and hands-on experience with CyberArk Privilege Access ManagementFamiliarity with Active Directory, LDAP, and other directory services for user and group managementProficiency in scripting languages like PowerShell or Python for automation and REST API knowledgeWorking knowledge of CyberArk PAM operations: Platform management, safe management, account management and privileged session managerProven technical understanding of Identity and Access Management as it relates to PAMExperience in creating and maintaining all documentation relates to PAM's configuration, processes, service records, asset inventories, topologies, administration manuals, job instructionsKnowledge and experience in supporting CyberArk EPM administration will be great asset to be considered Some after hours / on-call support shifts required.CyberArk PAM Certification – Defender/Sentry preferred

Preferred Skills:

This position requires a strong analytical aptitude with the ability to drive solutions to a positive conclusionAble to work independently with high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables and build trust with internal clients and peersExcellent communication and collaboration skillsMethodical investigative aptitude to identify key control deficiencies and work towards continuous improvement

What’s in it for you:

We’re honoured to be recognized as a 2024 Best Workplaces in Ontario by Great Place to Work® Canada.We are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®,  for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health.Wellness programs that support the three pillars of your health – mental, physical, and financialThe opportunity to move along a variety of career paths with amazing networking potential.As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office

As a condition of the role, the successful candidate must obtain a Government of Canada Reliability Status security clearance through Sun Life in advance of the start date

Must be able to satisfactorily complete applicable background checks prior to the start date and during employment, in accordance with Sun Life’s policies and practices.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.  

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to thebrightside@sunlife.com.

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you! Several work options are available and can be discussed throughout the selection process depending on the role requirements and individual needs.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

84,000/84 000 - 138,000/138 000

Job Category:

IT - Technology Services

Posting End Date:

13/08/2025