{"id":3497205,"url":"https://alion.io/job/manulife-senior-cyberark-security-engineer","title":"Senior CyberArk Security Engineer","company":{"id":6650,"name":"Manulife","domain":"manulife.com","url":"https://alion.io/company/manulife","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":82,"ghost_share":0.012,"stale_share":0.232,"repost_share":0.146,"time_to_fill_p50_days":28,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada","Waterloo, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":128000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":53},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Azure","optional":true},{"name":"LDAP","optional":true},{"name":"Sentry","optional":true}],"status":"live","first_seen_at":"2026-10-29T00:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-01T20:53:56Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"We are looking for an experienced Senior CyberArk Security Engineer to join our global Privileged Access Management (PAM) Engineering team and help strengthen the security, automation, resilience and reliability of our enterprise PAM platform.\nThis is a hands-on engineering role where you will solve complex security and production challenges, build automation and integrations, contribute to platform modernization, and continuously improve how CyberArk services are designed, operated and supported.\nYou will partner with IAM, Security, Cloud, Infrastructure, Network, Operations and application teams across multiple regions. You will take ownership of complex engineering initiatives and production issues while providing technical guidance, sharing knowledge and helping strengthen engineering practices across the team.\nPosition Responsibilities:\nDesign, implement, enhance and support enterprise CyberArk Privileged Access Management solutions.\nEngineer, configure and troubleshoot CyberArk Digital Vault, PVWA, CPM, PSM, Credential Provider and CCP components.\nLead technical activities for CyberArk implementations, upgrades, migrations, infrastructure changes and platform modernization initiatives.\nDevelop and enhance CPM plugins, PSM connectors and application integrations to support evolving business and technology requirements.\nIntegrate applications and enterprise technologies with CyberArk using REST APIs, CCP, Credential Provider and other integration approaches.\nBuild automation using PowerShell, REST APIs, PACLI and other scripting technologies to reduce repetitive manual work, improve consistency and strengthen platform reliability.\nServe as a senior technical escalation point for the Operations team, leading investigation and resolution of complex production and CyberArk platform issues.\nPerform root-cause analysis across application, identity, operating system, network and infrastructure layers, driving issues through investigation, remediation, testing and permanent resolution.\nContribute to disaster recovery, patching, vulnerability remediation, platform hardening and lifecycle management activities.\nIdentify and implement opportunities to improve security, automation, resilience, scalability and operational efficiency.\nContribute to technical designs, engineering standards, implementation procedures and knowledge documentation.\nServe as a CyberArk technical subject-matter expert, contributing to technical design and architecture discussions while mentoring other engineers and sharing engineering best practices.\nRequired Qualifications:\nRelevant professional experience in cybersecurity, information technology, engineering or a related technical field. A bachelor's degree in Computer Science, Engineering, Cybersecurity, Information Systems or a related discipline is welcome, but equivalent relevant professional experience is equally valued.\nApproximately 5+ years of relevant Privileged Access Management or cybersecurity experience, including substantial hands-on CyberArk engineering experience.\nExperience engineering and supporting core CyberArk components, including Digital Vault, PVWA, CPM and PSM.\nExperience implementing, upgrading, integrating or enhancing CyberArk environments within enterprise technology environments.\nExperience integrating CyberArk with applications and enterprise technologies using REST APIs, CCP, Credential Provider or comparable integration approaches.\nScripting and automation experience, particularly with PowerShell and REST APIs, with a focus on reducing manual activities and improving platform reliability.\nStrong troubleshooting and root-cause analysis capabilities across CyberArk, identity, Windows and infrastructure technologies.\nKnowledge of Windows Server and Active Directory, with exposure to technologies such as Linux/Unix, databases, networking, cloud or other enterprise platforms.\nAbility to take ownership of complex technical work while collaborating effectively across engineering, security, infrastructure and application teams.\nClear written and verbal communication skills, including the ability to create technical documentation and provide technical guidance and mentorship to other engineers.\nPreferred Qualifications:\nExperience with one or more of the following would be an asset. You do not need to have experience in all of these areas to be considered:\nCyberArk Defender, Sentry or another relevant CyberArk technical certification.\nCISSP, CISM or another recognized cybersecurity certification.\nDevelopment or customization of CyberArk CPM plugins and PSM connectors.\nPACLI and advanced CyberArk automation.\nSAML, LDAP, SailPoint or other IAM technologies.\nCyberArk Endpoint Privilege Manager (EPM).\nCyberArk monitoring, reporting or automated platform health checks.\nDisaster recovery, resiliency testing, vulnerability remediation or infrastructure hardening.\nMicrosoft Azure or another enterprise cloud platform.\nWhat Will Make You Successful:\nYou approach CyberArk as an engineering platform, going beyond day-to-day administration to solve complex problems, build automation, develop integrations and continuously improve platform security and reliability.\nYou are curious and comfortable investigating issues across application, identity, operating system, network and infrastructure layers. You can take ownership of complex engineering and production issues while bringing in the right partners when collaboration is needed.\nYou look for opportunities to automate repetitive work rather than rely on manual processes, and you enjoy improving engineering practices, sharing knowledge and helping other engineers develop their capabilities.\nMost importantly, you combine deep technical problem-solving with a practical mindset: build secure solutions, keep critical services reliable, learn from production issues and make the platform better over time.\n\nWhen You Join Our Team:\nWe’ll empower you to learn and grow the career you want.\nWe’ll recognize and support you in a flexible environment where well-being and inclusion are more than just words.\nAs part of our global team, we’ll support you in shaping the future you want to see.\nThe role being advertised is an existing vacancy.\nAbout Manulife and John Hancock\nManulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.\nManulife is an Equal Opportunity Employer\nAt Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.\nIt is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact .\nReferenced Salary Location\nToronto, OntarioWorking Arrangement\nHybridSalary range is expected to be between\n$113,000.00 CAD - $163,000.00 CADEmployees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. If you are applying for this role outside of the primary location, please contact  for the salary range for your location.\nManulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact  for more information about U.S.-specific paid time off provisions.\nWe use data and analytics technologies, such as artificial intelligence (AI), and automated processing tools, to analyze and process the information you provide to us or third parties in the application process. For more information, please refer to our personal information collection statement.","description_format":"text","description_chars":9472,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Insurance coverage","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commercial & Retail Banks","Asset Management & Funds","Information Security","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-30T01:57:34Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":28,"reasons":["conf:7","velocity","win:early","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/manulife-senior-cyberark-security-engineer","json_url":"https://alion.io/job/manulife-senior-cyberark-security-engineer.json","meta":{"generated_at":"2026-11-02T00:40:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1148,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6650},"rest":"https://alion.io/mcp/rest/get_company?id=6650"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmanulife-senior-cyberark-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmanulife-senior-cyberark-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmanulife-senior-cyberark-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/manulife-senior-cyberark-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmanulife-senior-cyberark-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3497205}},{"tool":"search_jobs","arguments":{"company":"manulife.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3497205},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}