Platform Engineering Lead - Privileged Access Management (PAM) Vault Engineer

IGM Financial Inc. is a leading wealth and asset management company in Canada, managing approximately $310 billion in assets as of December 31, 2025. It offers financial planning and investment services to over two million Canadians through IG Wealth Management and Mackenzie Investments. 

Mackenzie Investments, founded in 1967, is a key part of IGM's business model, serving as a comprehensive asset-management partner for Canadian financial advisors and their clients. 

The Senior Manager, Platform Engineering (Privileged Access Management (PAM) Vault Engineer) is accountable for platform outcomes that enable consistent, secure, and scalable delivery across pods, with a specialized mandate over the enterprise vault secrets management platform. The role defines and applies platform standards and guardrails for secrets, encryption, and dynamic credential services, resolves cross-team constraints, and balances platform reliability, security, and usability in alignment with Technology governance.

• Own platform delivery outcomes across multiple teams for the PAM Vault service, ensuring reliability, security, and scalability requirements are met.
• Design and validate Vault services, automation patterns, and enablement tooling (secrets engines, dynamic credentials, PKI, encryption-as-a-service) aligned to architecture and security standards.

• Resolve cross-pod delivery constraints such as pipeline secrets injection, environment bottlenecks, and shared service reliability, and drive durable fixes.

• Drive Vault observability, operational readiness, and incident learning (audit logging, seal/unseal health, token and lease telemetry) to improve service maturity.

• Coordinate dependencies with Software, Infrastructure, Security/Risk, and Architecture partners; surface trade-offs and sequencing impacts.

• Determine when escalation is required due to enterprise impact or security risk (for example key material exposure or privileged secret compromise); ensure governance engagement.

• Enable AI-enabled delivery by standardizing safe patterns for automation, policy enforcement, and developer productivity tooling around secrets consumption.

• Define and reinforce platform standards (runbooks, SLOs/SLAs where applicable, change discipline, secret rotation and revocation policy) and ensure adoption.

• Contribute to chapters/communities by sharing practices, improving standards, and mentoring via influence.

• Post-secondary education in Technology or related field, or equivalent practical experience.
• Significant progressive experience delivering platform services and enablement capabilities in enterprise environments, including hands-on HashiCorp Vault, CyberArk Conjur administration and engineering.
• Strong judgement across reliability, security, usability, and cost trade-offs.
• Demonstrated ability to lead through influence across engineering and operations stakeholders.
• Experience with automation, CI/CD enablement, and service operability disciplines, including secrets management integration into pipelines.
• Experience embedding AI-enabled tooling responsibly within platform services and workflows.