Privileged Access Management Administrator

Join a Challenger

Being a traditional bank just isn’t our thing. We are big believers in innovating the banking experience because we believe Canadians deserve better options, and we challenge ourselves and our teams to creatively transform what’s possible in banking. Our team is made up of inquisitive and agile minds that find smarter ways of doing things. If you’re not afraid of taking on big challenges and redefining the future, you belong with us. You’ll get to work with people who will encourage you to reach new heights. We like to keep things fun, ask questions and learn together.

We are a big (and growing!) family. Overall we serve more than 370,000 people acrossCanadathrough Equitable Bank,Canada'sChallenger Bank, and have been around for more than 50 years. Equitable Bank's wholly-owned subsidiary, Concentra Bank, supports credit unions acrossCanadathat serve more than 5 million members. Together we have over$100 billionin combined assets under management and administration, with a clear mandate to drive change in Canadian banking to enrich people's lives. Our EQ Bank platform (eqbank.ca) has been named the top Schedule I Bank inCanadaon the Forbes World's Best Banks 2023, 2022, and 2021 lists.

Purpose of Job

This role manages the privileged access to our physical and virtual systems (servers, storage systems, cloud computing – core focus and including the operating system) and works with external service providers to install and maintain the company’s technologies. In addition to the core functions, the incumbent will also address technology software asks as these relate to infrastructure and hardware (eg core banking software, Data/Business Intelligence, SharePoint, Office 365, middleware, etc.). This will require off-hours support and participation in rotational on-call support including weekends. As a PAM Administrator, you will be a key consulting resource to other areas of Technology, and a sought-after expert partner. You will be innovative with Digital Identity Solutions using products such as Hashicorp Vault, Boundary, Microsoft Azure Identity suite and others.

• Day to day administration, monitoring and support of PAM environments as well as after hours on call support (rotational) to deal with issues as they arise
• Review PAM logs and verify access are valid.
• Primary technical resource for implementation, testing, and management of PAM solutions in relation to Enterprise projects. Align new and existing applications and systems to the IAM/PAM/RBAC framework. Upgrade and maintain the PAM infrastructure.
• Provide technical and governance oversight on the Identity Management projects. Serve as a Subject Matter Expert in the analysis, design, implementation, and support of all Identity Management projects, estimate timelines, and be responsible for their successful delivery while meeting the overall security and integrity of the solution.
• Collaborate with the CISO, cybersecurity team, portfolio managers, other architects, and I&T leadership to understand the business direction and consequent impact on the security posture
• Define the proper course of action and investment strategy by building business cases and security roadmaps
• Engage the IAM vendor ecosystem to understand capabilities and limitations to drive improvements in the security posture and capabilities of current products, and assist in the selection of the right partners that integrate with the overall architecture and manage risk appropriately
• Continuously monitor and evaluate the environment through self-assessments and independent security reviews. Enable management to identify deficiencies and inefficiencies and to initiate improvement actions though security roadmap and strategies
• Communicate and foster collaboration by regularly providing updates to teams about ongoing initiatives and encouraging teams to work together to accomplish common goals and learning

• Computer science undergrad degree
• Minimum of 5+ years experience in IAM Engineering and Managing Information Security Analysts
• Experience in scripting to automate system administration tasks
• Understanding of IT security best practices, Triple A’s
• Experience in provisioning and managing user access in Active Directory (AD) and Azure Active Directory (AAD)
• Strong understand of Microsoft Azure and its Security Technologies such as JIT, JEA, Azure Identity Governance.
• Strong understanding of Microsoft Azure Active Directory, and Windows server/workstation OS
• Strong understanding of Identity and Access Management principles, concepts, and goals
• Proven Experience with Microsoft Azure and Office 365
• Functional understanding of following protocols: TCP, UDP, DNS, NetBIOS, HTTP, HTTPS, SMTP, SNMP, SSH, TLS, MAPI, IPSec
• Excellent knowledge on IdP, Modern Authentication (and working with ADAL), PKI infrastructure, Bastion host
• Excellent organizational skills and the ability to manage multiple intake channels efficiently
• Excellent verbal and written communication skills
• Technical designation required for this role (CompTIA Security+ or SSCP or ISC2 Associates, AZ-500 MS Azure Security or SC-200 MS SecOps Analyst)
• Higher certifications is considered an asset (CISSP)

#LI-Hybrid

What we offer [For full-time permanent roles]

Competitive discretionary bonus

Market leading RRSP match program

???? Medical, dental, vision, life, and disability benefits

Employee Share Purchase Plan

Maternity/Parental top-up while you care for your little one

Generous vacation policy, personal days and even a moving day

Virtual events to connect with your fellow colleagues

Annual professional development allowance and a comprehensive Career Development program

A fulfilling opportunity to join one of the top FinTechs and help create a new kind of banking experience

The incumbent will be working hybrid and in office time will be spent working from Equitable Bank’s additional office space located at 351 King Street East, Toronto, ON.

Equitable Bank is deeply committed to inclusion. Our organization is stronger and our employees thrive when we honour and celebrate everyone’s diverse experiences and perspectives. In tandem with that commitment, we support and encourage our staff to grow not just in their career path, but personally as well.

We commit to providing a barrier-free recruitment process and work environment for all applicants. Please let us know of any accommodations needed so that you can bring your best self to the application process and beyond.All candidates considered for hire must successfully pass a criminal background check and credit check to qualify for hire. While we appreciate your interest in applying, an Equitable recruiter will only contact leading candidates whose skills and qualifications closely match the requirements of the position.

We can’t wait to get to know you!