At KeyData Cyber, we're shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.
With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.
We deliver comprehensive solutions across IAM domains, including:
- Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
- Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.
If you're ready to grow your career alongside some of the industry's best, come join us — you're key to our success
We are looking for a CyberArk Support Engineer to join KeyData's Delivery Services team. In this role, you will provide Level 2 and Level 3 support for enterprise CyberArk environments while taking ownership of critical customer incidents. You will troubleshoot complex technical issues, perform root cause analysis, support infrastructure and CyberArk platform operations, and collaborate with internal teams to ensure the timely resolution of customer issues. This role requires strong technical expertise in CyberArk, Windows infrastructure, networking, and scripting.
Location: Canada
Employment Type: Contract, Remote
Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway
- Design, implement, configure, and support Privileged Access Management (PAM) solutions to securely manage privileged identities throughout their lifecycle.
- Lead incident response activities, perform advanced troubleshooting, facilitate war rooms, and conduct detailed root cause analysis (RCA) for PAM-related incidents and service disruptions.
- Act as the primary technical escalation point for complex PAM issues, providing timely resolution while adhering to established SLAs and operational standards.
- Manage and support CyberArk/Idira components including Vault, PVWA, CPM, PSM, CCP, SCIM, and related integrations in enterprise environments.
- Discover, assess, onboard, and manage privileged accounts to support least-privilege and Zero Standing Privilege initiatives.
- Collaborate with project teams, infrastructure teams, security teams, and business stakeholders to design and implement PAM solutions for new and existing technologies.
- Implement security patches, upgrades, system maintenance, cleanup activities, and server decommissioning while ensuring compliance with security and operational requirements.
- Support cloud transformation initiatives by providing technical expertise on cloud-based PAM integrations and migrations.
- Analyze recurring issues, identify process bottlenecks, and recommend automation, workflow improvements, and risk mitigation strategies.
- Develop and maintain operational procedures, technical documentation, knowledge articles, training materials, and lifecycle management documentation.
- Review architecture diagrams, technical requirements, and security controls to identify risks and recommend appropriate remediation strategies.
- Support security investigations and collaborate with internal teams to assess and remediate IAM and PAM-related security risks.
- Participate in change management, release management, code promotion processes, and Agile delivery practices.
- Participate in a rotating on-call support model to ensure operational continuity and service availability.
- 4+ years of hands-on experience as a CyberArk/Idira Engineer, Administrator, or PAM Specialist in large enterprise environments.
- Strong expertise in designing, implementing, administering, and troubleshooting CyberArk/Idira solutions, including: Vault, PVWA, CPM, PSM, CCP, SCIM
- Experience supporting self-hosted/on-premises CyberArk environments, including upgrades, migrations, cleanup activities, and server decommissioning.
- Strong understanding of Identity & Access Management (IAM) and Privileged Access Management (PAM) principles, controls, and best practices.
- Experience integrating PAM solutions across: Active Directory, Azure Active Directory / Entra ID, Windows, Unix/Linux, Databases, Mainframe environments
- Experience with REST APIs, workflow automation, and scripting using Python, PowerShell, or similar technologies.
- Strong background in Incident, Problem, Change, and Service Continuity Management within ITIL-based environments.
- Experience performing root cause analysis, security assessments, risk reviews, and control validation activities.
- Familiarity with cloud technologies and cloud migration initiatives; CyberArk Cloud/Pcloud migration experience is considered a strong asset.
- Experience working within Agile delivery environments and using tools such as Jira, Confluence, and SharePoint.
- Strong analytical, troubleshooting, documentation, and stakeholder management skills.
- Excellent verbal and written communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.
- Bachelor's degree in Computer Science, Information Technology, Engineering, Information Security, or equivalent experience.
- CISSP, CyberArk certifications, or other security certifications are considered assets.
- Experience supporting Zero Standing Privilege (ZSP) initiatives.
- Experience with enterprise security governance, risk management, and compliance frameworks.
- Knowledge of current cybersecurity threats, IAM/PAM trends, and security best practices.
- Engineering, application support, or software development background.
- Experience with on-premises to cloud PAM migrations.
Compensation
The hourly rate range for this position is $35–$45 CAD per hour. The final rate will be determined based on the candidate's experience, overall fit for the role, and expected ramp-up time. This is a 06-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person's unique strengths, contributions, and the value they bring to the organization.#LI-RR1
Why You'll Love Working Here
At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.
Accessibility & Accommodations
If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request.
Fraud Prevention & Identity Verification
We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.
Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.
