Senior Product Manager, Identity & Risk Platforms

Questrade Financial Group•Toronto, ON

2d•CA$150,000 - CA$180,000•Hybrid

About The Position

Questrade Financial Group (QFG) is seeking a Senior Product Manager for Identity & Risk Platforms to lead program execution and manage the product roadmap for their Customer Experience and Identity Management Platform. This platform includes components such as Customer Identity Access Management, Notification Platform, and Customer Risk Scores. The role involves acting as a security advocate, championing modern product discovery and delivery, and treating internal capabilities as tier-1 products. The Senior Product Manager will drive the strategy for Identity & Access Management (IAM), evolve the Customer Notification Platform, oversee enterprise document strategy, define requirements for core microservices, and leverage data analytics for product recommendations. Stakeholder management and a deep understanding of distributed systems and modern APIs are crucial for success in this role.

Requirements

5+ years of experience in product management, platform engineering, and other equivalent technical leadership.
7+ years of cumulative professional experience across industries.
Post-secondary education, preferably in Computer Science, Engineering, Business, or a related field.
Deep passion for security and protecting clients' sensitive data and financial assets.
Relentlessly up-to-date on the latest technologies, threat landscapes, and online security trends.
Deep understanding of modern product management principles, with a proven track record of shifting teams from 'feature factories' to empowered, outcome-driven squads using lean startup and continuous discovery methodologies.
Possess a Platform Product Mindset, with the proven ability to abstract complex system logic into reusable, scalable APIs and microservices.
Solid understanding of event hubs, durable queue based messaging (e.g., Kafka, PubSub), and common publisher/subscriber concepts.
Clear understanding of common API and RPC protocols used in a modern AI-enabled architecture.
Knowledge of writing/understanding/interpreting API documentation.
Knowledge in data analysis using SQL.

Nice To Haves

Working knowledge of IAM protocols and standards, specifically OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, and JWT (JSON Web Tokens).
Experience managing APIs with Apigee X.
MCP, A2A, A2P experience in a secure platform or other regulated environment.
Foundational knowledge of authentication mechanisms, including Risk-Based Authentication, Passwordless flows, FIDO2/WebAuthn, and Multi-Factor Authentication (MFA) implementations.
Experience with major Identity Providers (IdPs) and Customer IAM (CIAM) platforms (e.g., Okta, Auth0, Ping Identity, Azure AD) or directory services (LDAP).
Deep familiarity with data privacy regulations (GDPR, PIPEDA) and security/compliance frameworks (SOC2) related to identity and document storage.
Experience transitioning legacy monolithic applications into decoupled, domain-driven microservices.
Comfortable presenting complex technical platform initiatives and architectural trade-offs to executive teams.
Experience in the banking/financial/investment systems/solution development area.
Messaging schemas and tools like ProtoBuf are desirable.
CSPO (Certified Scrum Product Owner), CSM (Certified Scrum Master) or other relevant business analysis certification an asset.
Practical experience using AI-powered development and productivity tools (such as Cursor, GitHub Copilot, or advanced prompting techniques) to accelerate technical discovery, API prototyping, data analysis, or requirements drafting.

Responsibilities

Act as the first line of defense in product design, ensuring a security-first mindset to protect clients' personal information and financial assets.
Champion an 'outcomes over outputs' approach using continuous discovery habits to understand friction points and evolve the platform based on qualitative and quantitative data.
Define and track key product metrics (adoption rates, time-to-integration) and engineering metrics (SLIs, SLOs, latency, error budgets) to drive data-informed prioritization.
Lead the execution of the Fundamental Customer Capabilities program, empowering cross-functional teams to solve complex problems.
Drive the roadmap for robust IAM systems, including authentication, authorization (RBAC, ABAC, PBAC), SSO, identity federation, and user lifecycle management, championing Zero Trust Architecture and the Principle of Least Privilege.
Evolve the omni-channel Customer Notification Platform (Email, SMS, Push, In-App), focusing on routing logic, template management, user preference centers, and reliability.
Oversee systems for secure document storage, generation, and retrieval, ensuring alignment with data residency rules, RBAC-level access, and enterprise retention policies.
Translate complex technical constraints, security frameworks, and business strategies into detailed user stories and technical specifications for core microservices, API gateways, and token management systems.
Demonstrate a strong grasp of internal analytics tools, gather insights via ad hoc queries, analyze project results, drive product recommendations, and set quantified goals.
Proactively identify and align cross-functional stakeholders, integrate their feedback, recommend the best path forward, and escalate strategically when necessary.