{"id":2953873,"url":"https://alion.io/job/ig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer","title":"Platform Engineering Lead - Privileged Access Management (PAM) Vault Engineer","company":{"id":706808,"name":"IG Wealth Management","domain":"ig.ca","url":"https://alion.io/company/ig-wealth-management","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":98,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0.5,"time_to_fill_p50_days":17,"computed_at":"2026-11-03T05:54:40Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":118500,"max":152500,"currency":"CAD","period":"year","gross":null,"usd_annual":108597},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Vault","optional":false}],"status":"live","first_seen_at":"2026-10-20T20:50:19Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-03T09:59:05Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Division: IGM Technology\nLocation: Toronto, Winnipeg\nIGM Financial Inc. is a leading wealth and asset management company in Canada, managing approximately $310 billion in assets as of December 31, 2025. It offers financial planning and investment services to over two million Canadians through IG Wealth Management and Mackenzie Investments.\nFounded in 1926, IG Wealth Managementis a key part of IGM's business model, providing comprehensive wealth management services to Canadian financial advisors and their clients.\nWith a vision to inspire financial confidence, IG Wealth Managementis recognized as one of Manitoba’s Top Employers, Canada’s Top 100 Employers, and Best Diversity Employers, aiming to innovate the industry and support Canadians in achieving their financial goals.\nJoin our team to engage in continuous learning and skill development in a supportive environment. Experience the best of both worlds with our hybrid work environment, where you spend three days a week in the office, connecting, collaborating, and enjoying quality time with your amazing colleagues! Our Values: Be better; we strive for improvement in everything we do. Be accountable; we foster clarity and are empowered to act responsibly. Be a team; we are united to drive collective impact to achieve our goals.\nOverall Job Purpose\nThe Senior Manager, Platform Engineering (Privileged Access Management (PAM) Vault Engineer) is accountable for platform outcomes that enable consistent, secure, and scalable delivery across pods, with a specialized mandate over the enterprise vault secrets management platform. The role defines and applies platform standards and guardrails for secrets, encryption, and dynamic credential services, resolves cross-team constraints, and balances platform reliability, security, and usability in alignment with Technology governance.\nKey Accountabilities\nPlatform Delivery Outcomes\nOwn platform delivery outcomes across multiple teams for the PAM Vault service, ensuring reliability, security, and scalability requirements are met.\nDesign and validate Vault services, automation patterns, and enablement tooling (secrets engines, dynamic credentials, PKI, encryption-as-a-service) aligned to architecture and security standards.\nCross-Team Constraint Resolution\nResolve cross-pod delivery constraints such as pipeline secrets injection, environment bottlenecks, and shared service reliability, and drive durable fixes.\nObservability and Operational Readiness\nDrive Vault observability, operational readiness, and incident learning (audit logging, seal/unseal health, token and lease telemetry) to improve service maturity.\nDependency Coordination\nCoordinate dependencies with Software, Infrastructure, Security/Risk, and Architecture partners; surface trade-offs and sequencing impacts.\nEscalation and Governance\nDetermine when escalation is required due to enterprise impact or security risk (for example key material exposure or privileged secret compromise); ensure governance engagement.\nAI-Enabled Delivery\nEnable AI-enabled delivery by standardizing safe patterns for automation, policy enforcement, and developer productivity tooling around secrets consumption.\nStandards and Discipline\nDefine and reinforce platform standards (runbooks, SLOs/SLAs where applicable, change discipline, secret rotation and revocation policy) and ensure adoption.\nCommunity and Mentoring\nContribute to chapters/communities by sharing practices, improving standards, and mentoring via influence.\nQualifications\nPost-secondary education in Technology or related field, or equivalent practical experience.\nSignificant progressive experience delivering platform services and enablement capabilities in enterprise environments, including hands-on HashiCorp Vault, CyberArk Conjur administration and engineering.\nStrong judgement across reliability, security, usability, and cost trade-offs.\nDemonstrated ability to lead through influence across engineering and operations stakeholders.\nExperience with automation, CI/CD enablement, and service operability disciplines, including secrets management integration into pipelines.\nExperience embedding AI-enabled tooling responsibly within platform services and workflows.\nThe expected annual base salary range for this role is $118,500 - $152,500, which is determined based on skills, knowledge and experience and geographic location. In addition to base salary, this role is eligible for annual short-term incentive, health and well-being benefits, retirement and savings plan, paid time off and career development.\nBenefits:\nCOMPETITIVE COMPENSATION & RECOGNITION: competitive base salary, performance-weighted bonus, education/career support, option to join Employee Share Purchase Plan with employer matching component.\n\nEMPLOYEE BENEFITS & INSURANCE: competitive health and dental coverage, flexible plan for you and your family and short-term & long-term disability plans.\n\nRETIREMENT SAVINGS PROGRAMS: voluntary Defined Contribution Pension Plan\n\nWORK LIFE BALANCE: paid volunteer days, competitive time off, including 10 wellness days off, WorkPerks discount program, hybrid & flex work arrangements.\n\nINCLUSIVE CULTURE AND DIVERSITY: living our core values: Be a Team, Be Accountable, Be Better, engaging with community through Business Resource Groups (BRG communities are volunteer employee-led groups formed around a common interest, identity, or background).\n\nIGM is a diverse workplace committed to doing business inclusively - this starts with having a representative workforce! We encourage applications from all qualified candidates that represent the diversity present across Canada - including racialized persons, women, Indigenous persons, persons with disabilities, 2SLGBTQIA+ community, gender diverse and neurodiverse individuals, as well as all who may contribute to the further diversification of ideas.\nIG is an accessible employer committed to providing a barrier- free recruitment experience. If you require an accommodation or this information in an alternate format at any stage of the recruitment process, please reach out to the Talent Acquisition team who will work with you to meet your needs.\nHow to Apply: Interested candidates are invited to submit their resume and a cover letter detailing their qualifications and experience to https://www.ig.ca/en/careers\nWe thank all applicants for their interest in IG Wealth Management; however, only those candidates selected for an interview will be contacted.\nArtificial Intelligence in Recruitment: As part of our Talent Acquisition process, we may use artificial intelligence and automated tools to support activities such as candidate sourcing, application review, and interview scheduling. These tools support the recruitment process; all hiring decisions are made by people.\nPlease apply before November 3 2026.","description_format":"text","description_chars":6843,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Hybrid work","Retirement plans"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Information Security","Financial Services","Asset Management & Funds"],"lifecycle":[{"event":"open","at":"2026-10-20T20:50:19Z"}],"visa":[],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":1,"p_active":0.869,"p_room":0.75,"age_days":13,"expected_fill_days":17,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":108597,"is_top_pay":false},"html_url":"https://alion.io/job/ig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer","json_url":"https://alion.io/job/ig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer.json","meta":{"generated_at":"2026-11-03T14:38:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20574,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":706808},"rest":"https://alion.io/mcp/rest/get_company?id=706808"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fig-wealth-management-platform-engineering-lead-privileged-access-management-pam-vault-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2953873}},{"tool":"search_jobs","arguments":{"company":"ig.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2953873},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}