Senior IAM Systems Engineer, Authorization – Global Security

Responsibilities

• Design and implement enterprise authorization solutions using Open Policy Agent (OPA) with Rego for fine-grained, policy-as-code access control
• Develop and maintain authorization policies in JSON-structured Rego, ensuring scalability, reusability, and alignment with business and regulatory requirements
• Integrate Policy Decision Points (PDPs) with Policy Information Points (PIPs) across RBC’s ecosystem (e.g., Workday, Salesforce, Beeline) to centralize entitlement data
• Build custom authorizers, sidecars, and connectors to extend authorization capabilities to legacy and modern applications
• Engineer a centralized attestation service by aggregating authorization policies, roles, entitlements, and physical access data into a unified compliance framework
• Leverage graph database technologies (Neo4j) to model complex relationships between identities, resources, and permissions f...