Senior IAM Engineer - Secret Management (Global Security)

RBC; Toronto; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Total rewards program

Stock options

Flexible benefits

Career development

Job summary

RBC in Toronto is seeking a Senior IAM Systems Engineer - Secret Management to design, implement, and support Secret Management solutions with a strong focus on HashiCorp Vault and CyberArk Conjur. You will lead full lifecycle deployments, automate infrastructure patches, and collaborate with multiple teams to align IAM with business goals.

The role requires 5+ years IT experience including 3+ years in security product support, and hands-on expertise with cloud, DevOps, and container

Qualifications

• 5+ years of IT experience, with 3+ years hands-on support for security products such as HashiCorp Vault or CyberArk.
• Proficiency in DevOps, IT operations, security, cloud, microservices, containers, and scheduling platforms including Cloud Foundry, AWS, Azure, OpenStack, Kubernetes, OpenShift, Puppet, Chef and Terraform.
• Strong understanding of non-human identity concepts: service accounts, workload identity, ephemeral credentials, secret rotation, attestation.
• Deep understanding of IAM principles: Identity governance, privileged access security, and access management.
• Proficient in Java development with Springboot, with programming proficiency for automation and integrations.
• Experience with OpenShift cloud platforms and containerized deployments with Docker.
• Strong troubleshooting skills, including performance tuning and security hardening.

Responsibilities

• Lead Secret management implementations: full lifecycle of Secret Management solutions incl. installation, configuration, and troubleshooting for HashiCorp Vault and CyberArk Conjur.
• Be a SME on HashiCorp Vault/CyberArk Conjur, and DevOps tools and products.
• Drive automation and efficiency: develop automated processes for infrastructure deployment and security patching for Secret Management Service.
• Build and maintain dev environments ensuring RBC patching and currency on applications, testing, hotfixes and service packs, and integrations.
• Collaborate cross-functionally with IT, Security, DevOps, and Compliance to align IAM initiatives with business goals.
• Partner with AI platform, cloud, DevOps, applications and security teams to deliver consistent AI identity controls across the estate.
• Design and execute integration patterns for AI agents, services, and workloads to consume identity and secrets securely.
• Ensure project success: manage deliverables using Agile/Scrum, track progress in Jira, and maintain runbooks.

Skills

IAM

HashiCorp Vault

CyberArk Conjur

DevOps

Kubernetes

OpenShift

Terraform

Java Springboot

Automation

Tools

HashiCorp Vault

CyberArk Conjur

Docker

OpenShift

Kubernetes

Terraform

Ansible

Jenkins

Git

JIRA

Confluence

Job description

Job Description

What is the opportunity?

As the Senior IAM Systems Engineer - Secret Management you will participate in design with architect then lead implementation, and support of Secret Management solutions at RBC, with a strong focus on HashiCorp and CyberArk technologies. This role requires deep technical expertise in IAM, hands-on experience with HashiCorp Vault or CyberArk Conjur, and the ability to collaborate across teams to deliver secure, scalable identity solutions. This role is also responsible for rolling out and integrating the enterprise AI / non-human identity (NHI) solution across the systems and platforms that consume AI agents, services, and workload identities. This engineer bridges identity and the broader enterprise, turning an AI identity capability into a real, organization-wide control. The ideal candidate is a problem-solver with a passion for cybersecurity, automation, and driving efficiency in enterprise environments.

What will you do?

• Lead Secret management Implementations: Lead and manage the full lifecycle of Secret Management solutions, including installation, configuration, and troubleshooting for product of HashiCorp Vault and CyberArk Conjur.
• Be a Subject Matter Expert (SME) on HashiCorp Vault/CyberArk Conjur, and DEVOP tools and products.
• Drive Automation & Efficiency: Develop automate process for infrastructure deployment and security patching for Secret Management Service.
• Builds and maintains dev environments that includes but not limited to ensure RBC required patching is maintained, ensuring currency on applications including testing, hotfixes and service packs, and support application integrations
• Collaborate Cross-Functionally: Partner with IT, Security, DevOps, and Compliance teams to align IAM initiatives with business goals.
• Partner with AI platform, cloud, DevOps, application, and security teams to deliver consistent AI identity controls across the estate
• Design and execute integration patterns for AI agents, services, and workloads to consume identity and secrets securely
• Ensure Project Success: Manage deliverables using Agile/Scrum methodologies, track progress in tools like Jira, and maintain clear documentation (runbooks).
• Influence Stakeholders: Communicate technical strategies to both technical and non-technical audiences, ensuring alignment on timelines and outcomes.

What do you need to succeed?

Must have:

• 5+ years of IT experience, with 3+ years hands-on support for Security product such like HashiCorp Vault or CyberArk.
• Proficiency in understanding concepts and technologies in DevOps, IT operations, security, cloud, microservices, containers, and scheduling platforms including cloud suite and services experience (ie. Cloud Foundry, AWS, Azure, OpenStack, Kubernetes, OpenShift, Puppet, Chef and Terraform)
• Strong understanding of non-human identity concepts: service accounts, workload identity, ephemeral credentials, secret rotation, attestation
• Deep understanding of IAM principles: Identity governance, privileged access security, and access management
• Proficient in Java development with Springboot,with programming proficiency for automation and integrations.
• Experience with Openshift cloud platforms and containerized deployments with Docker
• Strong troubleshooting skills, including performance tuning and security hardening.

Nice-to-have:

• Experience with infrastructure and application automation security implementation using SSO, SAML, IDM, OAuth 2.0/OIDC, Hashicorp and/or CyberArk
• Experience with architecture and implementation of automation solutions using Ansible, Jenkins, Ansible Tower, Git, JIRA, Confluence and CI/CD tools
• Experience securing AI / LLM workloads, agentic AI patterns, or MLOps pipelines
• Infrastructure-as-Code (IaC) skills (Terraform, Ansible)

What's in it for you?

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• A world-class training program in financial services
• Opportunities to do challenging work

Job Skills

Decision Making, Group Problem Solving, Identity Access Management (IAM), Information Security, Information Technology Security, IT Systems Integration, Negotiation, Software Development, Software Development Life Cycle (SDLC)

Additional Job Details

Address:

16 YORK ST:TORONTO

City:

Toronto

Country:

Canada

Work hours/week:

37.5

Employment Type:

Full time

Platform:

TECHNOLOGY AND OPERATIONS

Job Type:

Regular

Pay Type:

Salaried

Posted Date:

2026-06-11

Application Deadline:

2026-08-28

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.