Location: Toronto office with remote flexibility. Reporting Relationship: Senior Manager, Identity, Access and Secret Management. Posting Type: Replacement Position. Salary Range: $113,000 – $153,000 (variable or discretionary incentives may apply). Responsibilities Design, maintain, and operationalize cryptographic architecture across payment, cloud, and IAM ecosystems. Integrate and support HSM infrastructure; develop utilitiesand workflows using HSM SDKs/APIs to enable CKMS functions and secure payment cryptographic operations, including P2PE domain components. Govern enterprise PKI platforms (CyberArk ZTPKI) and drive certificate lifecycle automation using Venafi or equivalent tooling. Lead adoption and governance of enterprise Secrets Hub capabilities for centralized secret synchronization, policy enforcement, and automated secret distribution across multi‑cloud platforms. Champion code‑signing workflows to ensure software authenticity, integrity, and supply‑chain security across cloud and on‑premises environments. Support modernization and ongoing operations of PAM and secrets‑management platforms, including CyberArk Privileged Cloud, Secrets Manager, and GitHub Actions integrations. Perform security design reviews, maintain cryptographic patterns and guardrails, and provide cryptographic consulting to engineering, architecture, and compliance teams. Ensure cryptographic and access controls align with PCI DSS, PCI PIN, PCI P2PE, and PCI MPoC standards; support regulatory assessments, audit evidence collection, and control remediation activities. Improve IAM operational processes—including break‑glass workflows,



identity incident playbooks, and access remediation—with hands‑on maintenance of identity platforms such as Entra ID, SailPoint, and CyberArk. Qualifications 5–7 years of hands‑on experience in IAM, cryptography, or security engineering in a complex enterprise environment. Proven experience with HSMs, cryptographic key management, and key‑ceremony documentation and procedures. Working knowledge of IAM fundamentals: authentication, federation, SSO, directory services, privileged access, and secrets management. Hands‑on experience with relevant platforms such as CyberArk, Venafi, and HashiCorp Vault. Solid understanding of PCI security standards (PCI DSS, PIN, P2PE, MPoC) and their operational implications. Experience in payment cryptography or financial services environments is strongly preferred. Familiarity with CI/CD pipelines, automated secrets patterns, and cloud IAM platforms (Azure Entra ID, AWS IAM, or GCP IAM). Strong documentation discipline with the ability to translate technical designs into clear operational procedures and specifications. Certifications such as CISSP, CCSP, PCI ISA, or equivalent IAM/cryptography‑focused credentials are an asset. Benefits Moneris offers competitive compensation packages, including variable or discretionary incentive components, and a range of benefits and perks. For more information, visit Moneris.Com/careers. Moneris is an equal‑prospect employer. We welcome and encourage applications from Indigenous peoples, people of colour, people with disabilities, people of all genders, sexual orientation, and intersectional identities. #J-18808-Ljbffr

📌 Identity And Access Management Specialist - C$113,000 - C$153,000 A Year (Toronto)
🏢 Moneris
📍 Toronto