Description: Cybersecurity Engineer-DevSecOps- (IAM, PAM, CyberArk, Active Directory, Entra ID, Python,DevSecOps)

Toronto, ON - Hybrid (4 Days WFO)

6-12 months

RBC role

Role Descriptions: Job Title: Cybersecurity Engineer Identity| Risk &

- Automation Role Overview Support and enhance RBCs cybersecurity posture by managing identity and access lifecycle| non-personal IDs (NPIDs)| risk control frameworks| and DevOps security integration while driving process automation through Python-based tooling.

Key Responsibilities Identity &

- Access Management (IAM) Onboard applications and services into IAM platforms (SailPoint| CyberArk| Active Directory) Manage access provisioning| recertification| and deprovisioning workflows Enforce least-privilege and role-based access control (RBAC) policies Support PAM (Privileged Access Management) onboarding and credential vaulting NPID Management Create| maintain| and retire Non-Personal IDs (service accounts| shared accounts| system IDs) Ensure NPIDs comply with RBC password policy| rotation schedules| and ownership accountability Conduct periodic reviews and attestations of NPID inventory Remediate orphaned or stale NPIDs flagged during audits DevOps Security Support Embed security controls into CI/CD pipelines (Jenkins| Azure DevOps| GitHub Actions) Advise development teams on secrets management (HashiCorp Vault| Azure Key Vault)



Support SAST/DAST/SCA tool integration (Veracode| Snyk| Checkmarx) Collaborate on secure code reviews and threat modeling for current services Risk &
- Controls Management Own and track risk controls across assigned application portfolios Raise| manage| and remediate risk findings and exceptions Prepare risk reporting for audits| regulators| and senior management Automation &
- Tooling (Python) Develop Python scripts to automate IAM workflows| NPID audits| and vulnerability reporting Build integrations with internal APIs| Confluence| ServiceNow| and Tableau Maintain and enhance automation pipelines for recurring security operations tasks Reduce manual effort through scheduled jobs| data extraction| and automated reporting Required Skills IAM/PAM platforms: CyberArk| Active Directory| Azure AD/Entra ID Scripting: Python (pandas| requests| openpyxl| Selenium)| PowerShell DevSecOps toolchain familiarity Understanding of NPID/service account governance

Custom Fields

Name: Type of Asset

Value: None

Name: Work Assignment Location

Value: Hybrid

Name: Work Location CDF

Value: ~TCCI Canada Corporate~

Name: Requisition ID

Value: 10945125

Name: Assets

Value: None

Name: Parent

Value: IS-BFSI-Canada-2-Parent

Name: Child

Value: IS-BFSI-Canada-2-Group1

Name: Business Vertical

Value: CL-BFSI Americas 2

📌 Information Technology_CAN - CAN_Analyst (Toronto)
🏢 Artech
📍 Toronto