Platform Engineering Lead - Privileged Access Management (PAM) Vault Engineer
Mackenzie Financial Corporation22 hours ago
Toronto, CanadaStaff+
Responsibilities
- Own PAM Vault platform delivery outcomes across multiple teams, ensuring reliability, security, and scalability requirements are met.
- Design and validate Vault services, automation patterns, secrets engines, dynamic credentials, PKI, and encryption-as-a-service capabilities.
- Resolve cross-pod constraints involving pipeline secrets injection, environment bottlenecks, and shared-service reliability.
- Drive Vault observability, operational readiness, audit logging, seal/unseal health monitoring, and token and lease telemetry.
- Coordinate dependencies with Software, Infrastructure, Security/Risk, and Architecture stakeholders.
- Escalate enterprise-impacting or security-sensitive issues, including key material exposure and privileged secret compromise.
- Standardize safe AI-enabled automation, policy enforcement, and developer productivity tooling around secrets consumption.
- Define and reinforce runbooks, SLOs/SLAs where applicable, change discipline, and secret rotation and revocation policies.
- Share practices, improve standards, and mentor through technical communities and chapters.
Requirements
- Post-secondary education in Technology or a related field, or equivalent practical experience.
- Significant progressive experience delivering enterprise platform services and enablement capabilities.
- Hands-on HashiCorp Vault and CyberArk Conjur administration and engineering experience.
- Strong judgment across reliability, security, usability, and cost trade-offs.
- Demonstrated ability to lead through influence across engineering and operations stakeholders.
- Experience with automation, CI/CD enablement, service operability, and secrets management integration into pipelines.
- Experience embedding AI-enabled tooling responsibly within platform services and workflows.
Benefits
- Competitive base salary, performance-weighted bonus, education and career support, and an optional employee share purchase plan with employer matching.
- Health and dental coverage, flexible family plans, and short- and long-term disability coverage.
- Voluntary Group RRSP enrollment with employer matching.
- Paid volunteer days, competitive time off including 10 wellness days, WorkPerks discounts, and hybrid and flexible work arrangements.
- Inclusive workplace with employee-led Business Resource Groups and accessibility support.
- Hybrid work arrangement requiring three days per week in the office.
- Applications are requested by November 3, 2026.
About Mackenzie Financial Corporation
Mackenzie Financial Corporation (Mackenzie Investments) provides mutual funds, ETFs, private markets, and institutional asset‑management services for Canadian retail investors and advisors, as well as institutions. It earns fees for managing investment funds and mandates and distributes products largely through financial advisors and platforms. Founded in 1967 and headquartered in Toronto, it operates as part of IGM Financial Inc., a Canadian wealth and asset management group.