Identity and Access Management Specialist

Your Moneris Career – The Opportunity We are seeking an experienced IAM Specialist to secure and advance Moneris’s enterprise identity, cryptographic, and privileged access ecosystems. This role blends hands-on engineering with governance, architecture support, and controls alignment across cloud and on-premises environments. Location: You will be based in our Toronto office, balancing in-office collaboration with remote flexibility. Reporting Relationship: You will report to the Senior Manager, Identity, Access and Secret Management Posting Type: Replacement Position Salary Range: $113,000 - $153,000. Total compensation may also include variable or discretionary incentive components, including but not limited to bonuses and commissions. Individual job offers are determined by various factors, including experience, education, skills, certifications, and other business needs. Your Moneris Career – What you’ll do Design, maintain, and operationalize cryptographic architecture across payment, cloud, and IAM ecosystems, including key lifecycle management (generation, rotation, archival, destruction) following dual-control and split-knowledge principles. Integrate and support HSM infrastructure, developing utilities and workflows using HSM SDKs/APIs to enable CKMS functions and secure payment cryptographic operations including P2PE domain components. Govern enterprise PKI platforms (CyberArk ZTPKI) and drive certificate lifecycle automation using Venafi or equivalent tooling. Lead the adoption and governance of enterprise Secrets Hub capabilities, enabling centralized secret synchronization, policy enforcement, and automated secret distribution across multi-cloud platforms. Champion code signing workflows to ensure software authenticity, integrity, and supply chain security across cloud and on-premises environments. Support the modernization and ongoing operations of PAM and secrets management platforms, including CyberArk Privileged Cloud, Secrets Manager, and GitHub Actions integrations. Perform security design reviews, maintain cryptographic patterns and guardrails, and provide crypto consulting to engineering, architecture, and compliance teams. Ensure all cryptographic and access controls align with PCI DSS, PCI PIN, PCI P2PE, and PCI MPoC standards; support regulatory assessments, audit evidence collection, and control remediation activities. Improve IAM operational processes including break-glass workflows, identity incident playbooks, and access remediation, with hands-on maintenance of identity platforms such as Entra ID, SailPoint, and CyberArk. Your Moneris Career – What you bring 5-7 years of hands-on experience in IAM, cryptography, or security engineering in a complex enterprise environment. Proven experience with HSMs, cryptographic key management, and key ceremony documentation and procedures. Working knowledge of IAM fundamentals: authentication, federation, SSO, directory services, privileged access, and secrets management. Hands-on experience with relevant platforms such as CyberArk, Venafi, and HashiCorp Vault. Solid understanding of PCI security standards (PCI DSS, PIN, P2PE, MPoC) and their operational implications. Experience in payment cryptography or financial services environments is strongly preferred. Familiarity with CI/CD pipelines, automated secrets patterns, and cloud IAM platforms (Azure Entra ID, AWS IAM, or GCP IAM). Strong documentation discipline with the ability to translate technical designs into clear operational procedures and specifications. Certifications such as CISSP, CCSP, PCI ISA, or equivalent IAM/cryptography-focused credentials are an asset. Find out more about the work perks and benefits you get as a Moneris employee at Moneris.com/careers #LI-Hybrid Note: We welcome and encourage applications from Indigenous peoples, people of colour, people with disabilities, people of all genders, sexual orientation and intersectional identities. AI Disclosure: We may use AI-enabled tools to screen, select, and assess applications. All AI outputs are reviewed and validated by our recruitment team. We acknowledge that people from equity-deserving groups (including racialized individuals, women, gender diverse individuals, individuals with disabilities, neurodivergent individuals, members of 2SLGBTQIA+ communities and those born outside of Canada) are less likely to apply for jobs unless they feel they meet all the requirements posted. At Moneris, we believe candidates bring experience to their work in many ways. We encourage you to apply and share, in the application form, the transferrable experience you bring, and how this will support your success in this role.