Individually we are people, but together we are Aviva. Individually these are just words, but together they are our Values – Care, Commitment, Community, and Confidence.

The Identity and access Management (IAM) team is looking for someone with expertise defining strategy, roadmap and an operating model for privileged access management. The ideal candidate will possess technical hands-on experience implementing a PAM solution with capabilities to manage a variety of privileged access (servers, databases, service accounts, secrets, etc.) Strong interpersonal skills will be required to collaborate with technical teams, business stakeholders and Aviva partners.

What you’ll do

• Deploy, configure and upgrade capabilities for PAM solutions (BeyondTrust, CyberArk)

• Streamline onboarding and management of privileged accounts, service accounts, secrets and AI identities

• Optimize automation processes for onboarding a variety of assets (servers, databases, networking equipment, etc.)

• Build PAM foundations for AWS platform

• Monitor privileged account usage and remediate any vulnerabilities

• Develop PAM standards and align processes with industry best practices

What you’ll bring

• Bachelor's degree in Computer Science or Computer Engineering, or equivalent experience

• At least 5 years of IAM experience with focus on PAM implementations (BeyondTrust, CyberArk)

• Experience onboarding a broad range of identities across various platforms (Active Directory, Linux, Mainframe, SQL, Oracle, Hadoop, Mongo, etc.)

• Expertise with setting up capabilities to ensure that users are able to access their privileged identities in a concise and comprehensive manner across various platforms

• Proficiency with troubleshooting and resolving complex issues across the entire PAM landscape

• Ability to integrate PAM solutions with SIEM, IGA and ITSM tools

• Experience in scripting automation; JavaScript, PowerShell, Bash, Python

• Ability to effectively employ critical thinking and analysis to determine project scope, prioritization of work and timelines for the projects

• Outstanding verbal and written communication, interpersonal and collaborative skills – interacting with both internal and external clients and vendors from both technical and non-technical perspectives

• A curiosity about digital/cybersecurity – the desire and openness to upskill as required to stay pace with the current cyber threat landscape

What makes you stand out

• Experience with IGA(SailPoint, Saviynt) implementations and integrating a variety of application/source connectors (Workday, AD, LDAP, SQL, DB2, Web-Service)

• Experience with SSO/MFA solutions (Okta, Auth0, Ping, ForgeRock)

What you’ll get

• The salary band for this position ranges from $100,000 to $150,000. Please note that individual salary is determined by factors such as job-related knowledge, skills and experience, as well as internal equity.

• Compelling rewards package including base compensation, eligibility for annual bonus, retirement savings, share plan, health benefits, personal wellness, and volunteer opportunities.

• Outstanding Career Development opportunities.

• We’ll support your professional development education.

• Competitive vacation package with the option to purchase 5 extra days off per year.

• Employee driven programs focused on gender, LGBTQ+, origins, diversity, and inclusion.

• Corporate wellness programs to support our employees’ physical and mental health.

• Hybrid flexible work model.

This job advertisement is for an existing vacancy which has been posted both internally & externally.

Aviva Canada may use AI (Artificial Intelligence) tools to assist us throughout the recruitment process to screen, assess or select applicants for a position.

Aviva Canada welcomes applications from all qualified individuals and has a process in place to provide accommodations for persons with disabilities at all stages of the hiring process and during employment. If you require an accommodation during the interview or hiring process, please contact your Aviva Talent Acquisition Partner so that an appropriate accommodation can be arranged.

#LI-PS1
#LI-Hybrid