Your Moneris Career – The Opportunity
We are seeking an experienced IAM Specialist to secure and advance Moneris’s enterprise identity, cryptographic, and privileged access ecosystems. This role blends hands-on engineering with governance, architecture support, and controls alignment across cloud and on-premises environments.
Location: You will be based in our Toronto office, balancing in-office collaboration with remote flexibility.
Reporting Relationship: You will report to the Senior Manager, Identity, Access and Secret Management
Posting Type: Replacement Position
Salary Range: $113,000 - $153,000.
Total compensation may also include variable or discretionary incentive components, including but not limited to bonuses and commissions. Individual job offers are determined by various factors, including experience, education, skills, certifications, and other business needs.
Your Moneris Career – What you’ll do
Design, maintain, and operationalize cryptographic architecture across payment, cloud, and IAM ecosystems, including key lifecycle management (generation, rotation, archival, destruction) following dual-control and split-knowledge principles.
Integrate and support HSM infrastructure, developing utilities and workflows using HSM SDKs/APIs to enable CKMS functions and secure payment cryptographic operations including P2PE domain components.
Govern enterprise PKI platforms (CyberArk ZTPKI) and drive certificate lifecycle automation using Venafi or equivalent tooling.
Lead the adoption and governance of enterprise Secrets Hub capabilities, enabling centralized secret synchronization, policy enforcement, and automated secret distribution across multi-cloud platforms.
Champion code signing workflows to ensure software authenticity, integrity, and supply chain security across cloud and on-premises environments.
Support the modernization and ongoing operations of PAM and secrets management platforms, including CyberArk Privileged Cloud, Secrets Manager, and GitHub Actions integrations.
Perform security design reviews, maintain cryptographic patterns and guardrails, and provide crypto consulting to engineering, architecture, and compliance teams.
Ensure all cryptographic and access controls align with PCI DSS, PCI PIN, PCI P2PE, and PCI MPoC standards; support regulatory assessments, audit evidence collection, and control remediation activities.
Improve IAM operational processes including break-glass workflows, identity incident playbooks, and access remediation, with hands-on maintenance of identity platforms such as Entra ID, SailPoint, and CyberArk.
Your Moneris Career – What you bring
5-7 years of hands-on experience in IAM, cryptography, or security engineering in a complex enterprise environment.
Proven experience with HSMs, cryptographic key management, and key ceremony documentation and procedures.
Working knowledge of IAM fundamentals: authentication, federation, SSO, directory services, privileged access, and secrets management.
Hands-on experience with relevant platforms such as CyberArk, Venafi, and HashiCorp Vault.
Solid understanding of PCI security standards (PCI DSS, PIN, P2PE, MPoC) and their operational implications.
Experience in payment cryptography or financial services environments is strongly preferred.
Familiarity with CI/CD pipelines, automated secrets patterns, and cloud IAM platforms (Azure Entra ID, AWS IAM, or GCP IAM).
Strong documentation discipline with the ability to translate technical designs into clear operational procedures and specifications.
Certifications such as CISSP, CCSP, PCI ISA, or equivalent IAM/cryptography-focused credentials are an asset.
Find out more about the work perks and benefits you get as a Moneris employee at Moneris.com/careers
#LI-Hybrid
Note: We welcome and encourage applications from Indigenous peoples, people of colour, people with disabilities, people of all genders, sexual orientation and intersectional identities.
AI Disclosure: We may use AI-enabled tools to screen, select, and assess applications. All AI outputs are reviewed and validated by our recruitment team.
We acknowledge that people from equity-deserving groups (including racialized individuals, women, gender diverse individuals, individuals with disabilities, neurodivergent individuals, members of 2SLGBTQIA+ communities and those born outside of Canada) are less likely to apply for jobs unless they feel they meet all the requirements posted. At Moneris, we believe candidates bring experience to their work in many ways. We encourage you to apply and share, in the application form, the transferrable experience you bring, and how this will support your success in this role.
Skills Required
- 5-7 years hands-on experience in IAM, cryptography, or security engineering
- Proven experience with HSMs, cryptographic key management, and key ceremony documentation and procedures
- Working knowledge of IAM fundamentals: authentication, federation, SSO, directory services, privileged access, and secrets management
- Hands-on experience with CyberArk, Venafi, and HashiCorp Vault
- Solid understanding of PCI security standards (PCI DSS, PIN, P2PE, MPoC)
- Experience in payment cryptography or financial services environments
- Familiarity with CI/CD pipelines, automated secrets patterns, and cloud IAM platforms (Azure Entra ID, AWS IAM, or GCP IAM)
- Strong documentation discipline and ability to translate technical designs into operational procedures
- Certifications such as CISSP, CCSP, PCI ISA, or equivalent IAM/cryptography-focused credentials
Moneris Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Moneris and has not been reviewed or approved by Moneris.
-
Healthcare Strength — Coverage includes modern, flexible health options, 24/7 virtual healthcare, and expanded mental‑health support alongside an Employee Assistance Program. These elements contribute to a benefits package perceived as robust and supportive of wellbeing.
-
Retirement Support — Income security is reinforced through a defined‑contribution pension and profit‑sharing with company match, complemented by bonus and incentive plans. This creates added long‑term value beyond base salary.
-
Inclusive Benefits Coverage — Recent updates broaden access with fertility and gender‑affirming care, anti‑obesity drug coverage, and wig coverage for medical hair loss, aiming to improve accessibility and inclusivity. These additions signal active iteration toward more comprehensive coverage.
Moneris Insights
What We Do
Proud Canadian partner of empowering your business adventure with commerce solutions for your next chapter. We're boldly re-imagining a unified commerce and working with us means connecting your passion with a community to discover your purpose. Every day, we empower our team members to redefine what's possible in making an impact, creating growth opportunities, and making connections with our customers and each other. We're looking for out-of-the-box thinkers who want to join us in shaping the future of FinTech. Explore the careers hub page on our website to find an opportunity that's the right fit for you. https://moneris.com/careers
