At Raymond James, we develop, we collaborate, we decide, we deliver, and we improve together.

Raymond James Ltd. is Canada’s leading independent investment dealers offering high quality investment products and services to Canadians seeking customized solutions to their wealth management needs.

Lead Engineer, Identity Governance and Administration - IAM

How does the role impact the organization?

Raymond James Ltd. (Canada) is embarking on a multi-year digital transformation to migrate its core back-office, advisor, and client platforms to a modernized SaaS wealth management solution.

To support this initiative, we are hiring a Senior-Lead Engineer – Identity & Access Management (IAM/IGA) to champion enterprise IAM standards in Canada and join our global IAM team.

This is a high-impact hands-on role that blends architecture, engineering, governance, and enterprise alignment in a large-scale platform modernization program.

What will your role be responsible for?

• Serve as the Canadian IAM technical lead for the wealth platform transformation program.
• Partner with Enterprise IAM teams to align Raymond James Canada to global IAM and IGA standards.
• Act as primary liaison between Raymond James Canada Technology, Enterprise IAM Engineering, and FNZ solution architecture teams.
• Lead design and implementation of:
  • Enterprise SSO (OIDC, OAuth2.0, SAML) & Customer Identity (CIAM) Solutions
  • Identity Governance & Administration (IGA) integrations
  • Federation and token lifecycle management
  • Role-based access and entitlement models
  • Access certification and attestation controls
• Define and implement joiner/mover/leaver workflows and automated provisioning/de-provisioning processes.
• Oversee authentication architecture across:
  • FNZ SaaS platform
  • Advisor applications (front/middle/back office)
  • Client web and mobile applications
  • Third-party vendor integrations
• Ensure IAM logging, monitoring, and audit evidence meet regulatory and compliance requirements.
• Participate in Disaster Recovery (DR) planning and IAM failover testing.
• Provide architecture documentation, integration guidance, and technical leadership across business and technology stakeholders.

What can you expect from us?

Our most important investment is in people. Upon eligibility, Raymond James Ltd offers flexible workstyles, a competitive compensation and benefits package. Our benefits range from Health Benefits, RRSP Matching Program, Employee Stock Purchase Plan, Paid Time Off, Volunteer Days, Discretionary Bonuses, Tuition Reimbursement and many more! We also support internal promotion and community involvement.

What do we expect from you?

Required Technical skillsets:

• 10+ years of experience in Identity & Access Management engineering.
• 8+ years of experience in a senior or lead technical IAM engineering role.
• Strong expertise in
  • Enterprise federation, SSO and CIAM orchestration platforms (e.g. Ping DaVinci, PingOne, API-first frameworks)
  • 0, OpenID Connect, SAML, and token lifecycle management.
  • Mobile authentication (Passkeys, biometric enrollment, push MFA), secure SDKs, and PKI
  • IGA platforms (e.g., SailPoint, Saviynt, or equivalent)
  • Active Directory and Microsoft Entra ID in hybrid identity environments
  • Role hierarchy and entitlement modeling
  • Access provisioning, de-provisioning, and certification frameworks
  • API security authentication and token management
• Experience delivering IAM solutions in hybrid (on-prem + cloud + SaaS) environments.
• Financial Services industry experience preferred.

Additional Notes:

• Strong preference for candidates located in or able to work from the RJ Vancouver office.
• Hybrid workstyle 50% in-office requirement.
• Must demonstrate strong communication, stakeholder engagement, and cross-border collaboration skills.
• Experience working within large, multi-vendor enterprise programs is highly desirable

Education:

• Minimum of a Bachelor’s degree in Computer Science, MIS or related degree is required.
• Prefer candidates with one or more certifications in relevant technologies. (e.g., CISSP, CISM, Microsoft Identity certifications, IGA platform certifications).

Salary Range: $180,000-200,000 annually, in addition to competitive performance bonuses/incentives.

Actual compensation will be determined based on skills, experience, internal equity, and other job requirements.

This posting is for an existing vacancy.

At Raymond James – we honor, value, respect the uniqueness, experiences, and backgrounds of all of our Associates. When associates bring their best authentic self, our organization, clients and communities thrive, it is part of our people-first culture. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs.

Here at Raymond James we demonstrate our commitment to ensuring equal opportunities for all candidates. To request accommodations, candidates are instructed to contact Human Resources via email at recruitment@raymondjames.ca. By reaching out to this email address, candidates can communicate their specific requirements and discuss the necessary accommodations they may need to participate fully in the recruitment process.

We may use automated or AI-enabled tools to support parts of our recruitment and screening process, including screening, assessing or selecting applicants where applicable. These tools help us review applications efficiently, but they do not replace human decision-making.