PAM CyberArk Engineer
FNZ is a global wealth management platform provider.
Projects
About FNZ
FNZ describes itself as 'wealth's growth platform', providing a global, end-to-end wealth management platform that integrates modern technology, business operations, and investment operations within a regulated financial institution connected to a universe of investment products. The company serves banks, wealth managers, insurance companies, and asset managers, with over US$2.5 trillion in assets on platform and nearly 30 million end investors served through its clients. Its offerings span wealth management platforms, advisor tools and productivity solutions, asset management distribution, and trade and post-trade securities services, along with a data platform combining an Operational Data Store, Analytical Data Warehouse, and Aggregated Data Warehouse to power analytics, machine learning, and generative AI insights. FNZ has notable clients including Santander, Colonial First State (CFS), Vanguard, Aviva, and Swedbank, and in 2025 announced a global five-year strategic partnership with Microsoft to integrate Azure AI Foundry, Microsoft Fabric, GitHub Copilot, and Microsoft 365 Copilot across its platform and operations. FNZ is backed by major institutional shareholders including Caisse de dépôt et placement du Québec (CDPQ), CPP Investments, Generation Investment Management, and Motive Partners.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will engineer and improve CyberArk privileged access management solutions. You will mature security controls and processes, maintain security documentation, implement just-in-time and least-privilege processes, support CyberArk instances, monitor user sessions, and manage platform groups and users.
Requirements
- Knowledge of identity stores, including Entra ID and Active Directory, and cloud identity concepts.
- Ability to script automated solutions.
- Ability to engage business stakeholders to develop identity solutions.
Responsibilities
- Improve the privileged access tool, CyberArk.
- Mature security controls, services, and processes.
- Build governance and oversight for security controls and services.
- Support delivery of the global technology strategy with the Identity Security team.
- Develop and maintain security policies and standards.
- Implement just-in-time and least-privilege processes using CyberArk.
- Support global CyberArk instances.
- Support controlled monitoring of user sessions.
- Support groups and users within groups for key platforms and services.
- Develop consistent global services.