Senior IAM Engineer - Secret Management (Global Security)
Royal Bank of Canada · Vancouver, British Columbia, Canada
Financial Services · 10,001+ employees
About the role
Lead the design, implementation, and lifecycle management of Secret Management solutions using HashiCorp Vault and CyberArk Conjur. Collaborate with cross-functional teams to integrate AI identity controls and automate infrastructure deployment across the enterprise.
What they look for
Requirements
Requires 5+ years of IT experience with at least 3 years of hands-on support for security products like HashiCorp Vault or CyberArk. Candidates must possess deep knowledge of IAM principles, DevOps tools, containerized deployments, and proficiency in Java development.
Benefits
Full description
Job Description
What is the opportunity?
As the Senior IAM Systems Engineer - Secret Management you will participate in design with architect then lead implementation, and support of Secret Management solutions at RBC, with a strong focus on HashiCorp and CyberArk technologies. This role requires deep technical expertise in IAM, hands-on experience with HashiCorp Vault or CyberArk Conjur, and the ability to collaborate across teams to deliver secure, scalable identity solutions.
This role is also responsible for rolling out and integrating the enterprise AI / non-human identity (NHI) solution across the systems and platforms that consume AI agents, services, and workload identities. This engineer bridges identity and the broader enterprise, turning an AI identity capability into a real, organization-wide control. The ideal candidate is a problem-solver with a passion for cybersecurity, automation, and driving efficiency in enterprise environments.
What will you do?
- Lead Secret management Implementations: Lead and manage the full lifecycle of Secret Management solutions, including installation, configuration, and troubleshooting for product of HashiCorp Vault and CyberArk Conjur.
- Be a Subject Matter Expert (SME) on HashiCorp Vault/CyberArk Conjur, and DEVOP tools and products.
- Drive Automation & Efficiency: Develop automate process for infrastructure deployment and security patching for Secret Management Service.
- Builds and maintains dev environments that includes but not limited to ensure RBC required patching is maintained, ensuring currency on applications including testing, hotfixes and service packs, and support application integrations
- Collaborate Cross-Functionally: Partner with IT, Security, DevOps, and Compliance teams to align IAM initiatives with business goals.
- Partner with AI platform, cloud, DevOps, application, and security teams to deliver consistent AI identity controls across the estate
- Design and execute integration patterns for AI agents, services, and workloads to consume identity and secrets securely
- Ensure Project Success: Manage deliverables using Agile/Scrum methodologies, track progress in tools like Jira, and maintain clear documentation (runbooks).
- Influence Stakeholders: Communicate technical strategies to both technical and non-technical audiences, ensuring alignment on timelines and outcomes.
What do you need to succeed?
Must have:
- 5+ years of IT experience, with 3+ years hands-on support for Security product such like HashiCorp Vault or CyberArk.
- Proficiency in understanding concepts and technologies in DevOps, IT operations, security, cloud, microservices, containers, and scheduling platforms including cloud suite and services experience (ie. Cloud Foundry, AWS, Azure, OpenStack, Kubernetes, OpenShift, Puppet, Chef and Terraform)
- Strong understanding of non-human identity concepts: service accounts, workload identity, ephemeral credentials, secret rotation, attestation
- Deep understanding of IAM principles: Identity governance, privileged access security, and access management
- Proficient in Java development with Springboot,with programming proficiency for automation and integrations.
- Experience with Openshift cloud platforms and containerized deployments with Docker
- Strong troubleshooting skills, including performance tuning and security hardening.
Nice-to-have:
- Experience with infrastructure and application automation security implementation using SSO, SAML, IDM, OAuth 2.0/OIDC, Hashicorp and/or CyberArk
- Experience with architecture and implementation of automation solutions using Ansible, Jenkins, Ansible Tower, Git, JIRA, Confluence and CI/CD tools
- Experience securing AI / LLM workloads, agentic AI patterns, or MLOps pipelines
- Infrastructure-as-Code (IaC) skills (Terraform, Ansible)
What’s in it for you? We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- A world-class training program in financial services
- Opportunities to do challenging work
#LI-POST
Job Skills
Decision Making, Group Problem Solving, Identity Access Management (IAM), Information Security, Information Technology Security, IT Systems Integration, Negotiation, Software Development, Software Development Life Cycle (SDLC)
Additional Job Details
Address:
16 YORK ST:TORONTOCity:
TorontoCountry:
CanadaWork hours/week:
37.5Employment Type:
Full timePlatform:
TECHNOLOGY AND OPERATIONSJob Type:
RegularPay Type:
SalariedPosted Date:
2026-06-11Application Deadline:
2026-08-28Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above
Our Employment Opportunities
At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.
Join our Talent Community
Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.
Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.
RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.