What is the opportunity?The Senior IAM Systems Engineer, Passwordless Integration is responsible for rolling out and integrating the enterprise Passwordless authentication solution across the systems and platforms employees use every day. This role works across the organization — partnering with endpoint, workplace, infrastructure, and access teams — to bring passwordless authentication to Windows and macOS devices, virtual desktop and application delivery platforms, directory services, and other enterprise systems. Sitting within Platform Enablement Engineering and partnering closely with the Authentication team, this engineer bridges identity and the broader enterprise, turning a passwordless capability into a real, organization-wide experience.Passwordless is a strategic pillar of the IAM roadmap — directly improving security posture, reducing credential-related risk, and elevating the user experience. This engineer will shape how the enterprise integrates and scales passwordless across a heterogeneous estate, working at the intersection of authentication, endpoint, and access engineering.What will you do?Lead integration of the enterprise passwordless solution with workforce systems, including Windows endpoints, macOS endpoints, Citrix and other VDI / application delivery platforms, Active Directory, and other authentication-consuming systemsPartner with endpoint engineering (Windows, macOS), workplace technology, Citrix / virtualization, and directory services teams to deliver consistent passwordless experiences across the estateDesign and execute integration patterns for federated and non-federated systems, including login flows, fallback behaviors, lifecycle and recovery scenariosConfigure, test, and operationalize passwordless authenticator deployments on managed and unmanaged endpointsDrive integration with workforce authentication platforms and downstream consumersBuild automation for configuration deployment, policy management, and operational health checks of the passwordless integration footprintPartner with the Authentication team — who holds product accountability — to deliver against the passwordless roadmap and prioritize integration backlogEstablish observability, alerting, and operational practices for passwordless integrations across systemsWork with Architecture, Security, Risk, and Audit to ensure integration meet regulatory and internal control requirementsProvide deep technical input into rollout planning, change management, and user experience designSupport production operations, incident response, and root cause analysis for passwordless integrations across systemsDocument integration patterns, runbooks,



and standards for use by partner teams across the enterpriseBuild operational automation for the Passwordless toolset—patching, certificate rotation, configuration drift detection, and routine support operationsIntegrate with CI/CD pipelines and infrastructure platformsWhat do you need to succeed?Must-have7+ years in identity, authentication, endpoint, or platform integration engineeringSoftware Development: 3+ years of experience with Python or Java with strong OOP design principles, solid understanding of REST API's, microservices architectureDevOps Infrastructure: Experience with Infrastructure-as-code, CI/CD pipelines, containerization (Docker/Kubernetes), cloud platformsStrong hands‐on experience integrating authentication solutions with Windows and macOS endpoints, including credential providers, login flows, and device-bound authenticationSoftwareHands‐on experience integrating authentication with Citrix or equivalent VDI / virtual application delivery platformsStrong working knowledge of Active Directory, Kerberos, and modern federation protocols (OIDC, OAuth 2.0, SAML, FIDO2 / WebAuthn)Experience deploying and operating phishing-resistant or passwordless authentication solutions in an enterprise environmentStrong scripting / automation skills (PowerShell, Python, or equivalent) for configuration management and operational toolingStrong understanding of cryptographic primitives relevant to authentication (public-key cryptography, attestation, key management) and how they apply to endpoint-bound credentialsDeep hands‐on expertise with CI/CD platforms (Jenkins, GitHub Actions, GitLab CI)Nice‐to‐haveExperience integrating with Entra ID and/or Auth0 authentication flowsFamiliarity with enterprise endpoint management platforms (Intune, Jamf, SCCM) and how authentication integrates with managed-device postureExperience with mobile authentication (iOS / Android platform authenticators, secure enclave) and consumer‐style passwordless flowsFamiliarity with Zero Trust Architecture and phishing-resistant authentication strategyExperience leading enterprise-wide authentication rollouts or migrationsExperience automating IAM platforms (Entra ID, Auth0, SailPoint, CyberArk, or equivalent)Working knowledge of the banking/financial services regulatory landscape (FRB, Part 30, OSFI) and how it shapes authentication controlsWhat's in it for you?We thrive on the challenge to be our best,



progressive thinking to keep growing and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference in our communities, and achieving mutual successA comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicableLeaders who support your development through coaching and managing opportunitiesAbility to make a difference and lasting impactWork in a energetic, collaborative, progressive, and high‐performing teamOpportunities to do challenging work and take on progressively greater accountabilities#TECHPJJob SkillsInformation Technology (IT) Infrastructure, Programming Languages, Software Change Request Management, Software Development Life Cycle (SDLC), Software Engineering, Software Integration Engineering, Software Product Design, Software Product Technical Knowledge, Software Release Management, System Testing ToolsAdditional Job DetailsAddress:16 YORK ST:TORONTOCity: TorontoCountry: CanadaWork hours/week: 37.5Employment Type: Full timePlatform: TECHNOLOGY AND OPERATIONSJob Type: RegularPay Type: SalariedPosted Date: 2026-05-14Application Deadline: 2026-09-16Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date aboveOur Employment OpportunitiesAt RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.Join our Talent CommunityStay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well‐being of our clients and communities at jobs.Rbc.ComRBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.

📌 Senior Iam Systems Engineer, Passwordless Integration (Global Security) (Toronto)
🏢 RBC
📍 Toronto