Platform Engineering Lead - Privileged Access Management (PAM) Vault Engineer

Mackenzie Investments; Toronto, Winnipeg; Hybrid; CAD 119,000 - 153,000; Full time

Benefits offered by this job

Competitive compensation

Health & dental benefits

RRSP with employer matching

Hybrid & flex work

Volunteer days

Job summary

Mackenzie Investments is seeking a Senior Manager, Platform Engineering (PAM Vault Engineer) to oversee secure, scalable vault services across pods, aligning with enterprise standards. You will shape automation, governance and cross-team collaboration to support trusted access management.

The role emphasizes observability, security, and reliable delivery, with a hybrid work setup and a strong emphasis on mentoring and industry best practices.

Qualifications

• Post-secondary education in Technology or related field, or equivalent practical experience.
• Significant progressive experience delivering platform services and enablement capabilities in enterprise environments, including hands-on Vault and Conjur administration.
• Strong judgement across reliability, security, usability, and cost trade-offs.
• Demonstrated ability to lead through influence across engineering and operations stakeholders.
• Experience with automation, CI/CD enablement, and service operability disciplines, including secrets management integration into pipelines.
• Experience embedding AI-enabled tooling responsibly within platform services and workflows.

Responsibilities

• Own PAM Vault service delivery outcomes across teams, ensuring reliability, security, and scalability.
• Resolve cross-pod delivery constraints and drive durable fixes.
• Drive Vault observability, operational readiness, and incident learning to improve maturity.
• Coordinate dependencies with Software, Infrastructure, Security/Risk, and Architecture partners; surface trade-offs.
• Determine escalation needs due to enterprise impact or security risk; ensure governance engagement.
• Enable AI-enabled delivery by standardizing safe patterns for automation and policy enforcement.
• Define and reinforce platform standards (runbooks, SLOs/SLAs, change discipline, rotation policy) and ensure adoption.
• Contribute to chapters/communities by sharing practices and mentoring via influence.

Skills

Vault administration

HashiCorp Vault

CyberArk Conjur

Automation

CI/CD enablement

AI-enabled tooling

Platform reliability

Security trade-offs

Influence leadership

Governance engagement

Education

Post-secondary in Technology

Tools

HashiCorp Vault

CyberArk Conjur

Job description

Location: Toronto or Winnipeg

Referral Level: Level 1

Mackenzie Investments

IGM Financial Inc. is a leading wealth and asset management company in Canada, managing approximately $310 billion in assets as of December 31, 2025. It offers financial planning and investment services to over two million Canadians through IG Wealth Management and Mackenzie Investments.

Mackenzie Investments, founded in 1967, is a key part of IGM's business model, serving as a comprehensive asset-management partner for Canadian financial advisors and their clients.

At Mackenzie Investments You Can Build Your Career with Confidence. We are proud to be recognized as one of Canada’s Top 100 Employers for the fourth consecutive year and one of Canada’s Best Diversity Employers. Our vision and strategy aim to innovate the industry and support Canadians in achieving their financial goals.

Join our team to engage in continuous learning and skill development in a supportive environment. Experience the best of both worlds with our hybrid work environment, where you spend three days a week in the office, connecting, collaborating, and enjoying quality time with your amazing colleagues! Our Values: Be better; we strive for improvement in everything we do. Be accountable; we foster clarity and are empowered to act responsibly. Be a team; we are united to drive collective impact to achieve our goals.

Overall Job Purpose

The Senior Manager, Platform Engineering (Privileged Access Management (PAM) Vault Engineer) is accountable for platform outcomes that enable consistent, secure, and scalable delivery across pods, with a specialized mandate over the enterprise vault secrets management platform. The role defines and applies platform standards and guardrails for secrets, encryption, and dynamic credential services, resolves cross-team constraints, and balances platform reliability, security, and usability in alignment with Technology governance.

Key Accountabilities

• Platform Delivery Outcomes
  • Own platform delivery outcomes across multiple teams for the PAM Vault service, ensuring reliability, security, and scalability requirements are met.
  • Design and validate Vault services, automation patterns, and enablement tooling (secrets engines, dynamic credentials, PKI, encryption-as-a-service) aligned to architecture and security standards.
• Cross-Team Constraint Resolution
  • Resolve cross-pod delivery constraints such as pipeline secrets injection, environment bottlenecks, and shared service reliability, and drive durable fixes.
• Observability and Operational Readiness
  • Drive Vault observability, operational readiness, and incident learning (audit logging, seal/unseal health, token and lease telemetry) to improve service maturity.
• Dependency Coordination
  • Coordinate dependencies with Software, Infrastructure, Security/Risk, and Architecture partners; surface trade-offs and sequencing impacts.
• Escalation and Governance
  • Determine when escalation is required due to enterprise impact or security risk (for example key material exposure or privileged secret compromise); ensure governance engagement.
• AI-Enabled Delivery
  • Enable AI-enabled delivery by standardizing safe patterns for automation, policy enforcement, and developer productivity tooling around secrets consumption.
• Standards and Discipline
  • Define and reinforce platform standards (runbooks, SLOs/SLAs where applicable, change discipline, secret rotation and revocation policy) and ensure adoption.
• Community and Mentoring
  • Contribute to chapters/communities by sharing practices, improving standards, and mentoring via influence.

Qualifications

• Post-secondary education in Technology or related field, or equivalent practical experience.
• Significant progressive experience delivering platform services and enablement capabilities in enterprise environments, including hands‑on HashiCorp Vault, CyberArk Conjur administration and engineering.
• Strong judgement across reliability, security, usability, and cost trade‑offs.
• Demonstrated ability to lead through influence across engineering and operations stakeholders.
• Experience with automation, CI/CD enablement, and service operability disciplines, including secrets management integration into pipelines.
• Experience embedding AI-enabled tooling responsibly within platform services and workflows.

Benefits

• COMPETITIVE COMPENSATION & RECOGNITION: competitive base salary, performance-weighted bonus, education/career support, option to join Employee Share Purchase Plan with employer matching component.
• EMPLOYEE BENEFITS & INSURANCE: competitive health and dental coverage, flexible plan for you and your family and short-term & long-term disability plans.
• RETIREMENT SAVINGS PROGRAMS: voluntary Group RRSP enrolment with employer matching component.
• WORK LIFE BALANCE: paid volunteer days, competitive time off including 10 wellness days off, WorkPerks discount program, hybrid & flex work arrangements.
• INCLUSIVE CULTURE AND DIVERSITY: living our core values: Be a Team, Be Accountable, Be Better, engaging with community through Business Resource Groups (BRG communities are volunteer employee‑led groups formed around a common interest, identity, or background).

The expected annual base salary range for this role is $118,500-152,500, which is determined based on skills, knowledge and experience and geographic location. In addition to base salary, this role is eligible for annual short-term incentive, health and well‑being benefits, retirement and savings plan, paid time off and career development.

IGM is a diverse workplace committed to doing business inclusively - this starts with having a representative workforce! We encourage applications from all qualified candidates that represent the diversity present across Canada – including racialized persons, women, Indigenous persons, persons with disabilities, 2SLGBTQIA+ community, gender diverse and neurodiverse individuals, as well as all who may contribute to the further diversification of ideas.

Mackenzie Investments is an accessible employer committed to providing barrier‑free recruitment experience. If you require accommodation or this information in an alternate format at any stage of the recruitment process, please reach out to the Talent Acquisition team who will work with you to meet your needs.

Artificial Intelligence in Recruitment: As part of our Talent Acquisition process, we may use artificial intelligence and automated tools to support activities such as candidate sourcing, application review, and interview scheduling. These tools support the recruitment process; all hiring decisions are made by people.

We thank all applicants for their interest in Mackenzie Investments; however, only those candidates selected for an interview will be contacted.

Please apply by November 3 2026.

#LI-JS2

#LI-Hybrid