Master Web Access Management / IAM Engineer

What is the Opportunity?

We are seeking a seasonedMaster Web Access Management - IAM Engineerto lead the vision, strategy, and execution of IAM solutions across the US Wealth Management application portfolio. As a senior technical expert, this leader drives architectural direction, builds engineering excellence, and delivers modernized platforms that are secure, high performing and built for long-term growth. The ideal candidate will bring deep expertise across multiple platforms and a proven track record of driving innovation in access management.

What will you do?

• Technical Leadership & Architecture: Define and execute the IAM roadmap, aligning with enterprise security goals, regulatory requirements (FINRA/SEC), and business needs.
• Platform Expertise: Architect, implement, and optimize IAM solutions acrossmultiple platforms(e.g., Okta, Auth0, Azure AD/Entra ID, SiteMinder, or equivalent), including Web Access Management (WAM), Single Sign-On (SSO), and Identity Governance and Administration (IGA).
• Modern Authentication & Integration: Lead initiatives for modern authentication protocols (SAML, OAuth, OpenID Connect, JIT/SCIM) and integrate IAM solutions with SaaS, cloud, and on-premises applications.
• Mentorship & Governance: Mentor junior engineers, establish IAM best practices, and ensure compliance with enterprise standards. Guide teams in migrating from legacy WAM systems to modern platforms.
• Cross-Functional Collaboration: Partner with enterprise architects, security teams, and business units to design and deliver IAM solutions that balance security and usability.
• Vendor & Stakeholder Management: Act as a liaison with vendors, clients, and internal teams to drive SSO integrations, troubleshoot complex issues, and manage relationships.
• Innovation & Trends: Stay ahead of IAM trends (e.g., passwordless authentication, Zero Trust), evaluate emerging tools, and lead proof-of-concept initiatives.
• Operational Excellence: Oversee platform administration, documentation, and incident resolution for IAM systems, ensuring high availability and performance.

What do you need to succeed?

Must have:

• 10+ years of hands-on IAM experience, with at least 5 years in a lead or architectural role.
• Deep expertise in 3+ IAM platforms(e.g., Okta, Auth0, Entra ID, PingFederate, ForgeRock, SiteMinder).
• Proven experience withmodern authentication protocols(SAML, OAuth, OIDC) andprovisioning standards(SCIM, JIT).
• Working knowledge of directory services including Active Directory, Okta Universal Directory (UD), CA Directory and general LDAP/LDIF usage.
• Experience with reverse proxies including Apache and NGINX, Linux operating system, general load balancing and networking concepts.
• Demonstrated ability to leadlarge-scale IAM migrations(e.g., legacy to cloud-native platforms, coexistence, user migration).
• Excellent stakeholder management, communication, and mentoring skills.

Nice to have:

• Experience withcloud-native IAM(Azure AD, AWS IAM, GCP Cloud Identity) and hybrid identity models.
• Knowledge of Identity Governance and Administration (IGA)andprivileged access management (PAM).
• Familiarity with DevOps/CI-CD pipelines and IAM automation tools (e.g., Terraform, Ansible).
• Knowledge of wealth management or financial services regulatory environments.
• Certifications preferred:CISSP, CCSP, or vendor-specific certifications(e.g., Okta Certified Administrator, Microsoft Certified: Identity and Access Administrator).

What's in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.

• Leaders who support your development through coaching and managing opportunities.

• Ability to make a difference and lasting impact.

• Work in a dynamic, collaborative, progressive, and high-performing team.

• A world-class training program in financial services.

The expected salary range for this particular position is $90,000-$160,000 depending on your experience, skills, and registration status, market conditions and business needs.

You have the potential to earn more through RBC's discretionary variable compensation program which gives you an opportunity to increase your total compensation, provided the business meets its performance targets and you meet your individual goals.

RBC's compensation philosophy and principles recognize the importance of a highly qualified global workforce and plays a critical role in attracting, engaging and retaining talent that:

• Drives RBC's high-performance culture.

• Enables collective achievement of our strategic goals.

• Generates sustainable shareholder returns and above market shareholder value.

#TECHPJ

#LI-POST

Job Skills

Additional Job Details

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Inclusion and Equal Opportunity Employment

At RBC, we believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.