Cloud Security Engineer

Scotiabank • Toronto, ON

1d • Onsite

About The Position

The Cloud Security Engineer, Cloud Security Engineering will be responsible for providing technical delivery of solutions within a diverse team of cloud security engineers, deploying cutting edge cloud security tools, and leveraging industry-leading secure SDLC processes to support application security tools and infrastructure mandated by Cloud Security in their mission of protecting the bank and its customers from external threats. Contributes to the overall success of the Cloud Security Engineering team in Canada ensuring specific individual goals, plans, initiatives are executed / delivered in support of the team’s business strategies and objectives. Ensures all activities conducted are following governing regulations, internal policies and procedures.

Requirements

• 3+ years software development in Java, Javascript, Python, Bash, or PowerShell to build applications or automations.
• 3+ years deploying solutions to Google Kubernetes Engine (GKE) or Azure Kubernetes Service
• Experience working on IaC tools such as terraform and Helm
• Hands-on experience with system administration and DevSecOps support of Linux, Windows, SQL Server, PostgreSQL, and other vendor software.
• Strong understanding of cloud security, networking, workload identity, policy-as-code (OPA/Gatekeeper), and secrets management.
• Software and system architecture and technical documentation experience is an asset
• Excellent organization, time management, problem-solving, and analytical skills
• Strong communication skills, both written and spoken; of specific importance is strong communication to a technical audience.
• Knowledge of software design patterns, infrastructure architecture, DevOps, and security considerations.
• Awareness of how scalable, enterprise-level software system is designed (both on code and infrastructure levels).
• Experience working with relational databases.
• Desire to learn, grow yourself and your team.
• Passion for driving teams towards high performance and a deep pride in quality craftsmanship that delights users.
• Experience with Kubernetes or containerized applications is required.
• Bachelor (equivalent or higher) degree in computer science or engineering/mathematics discipline.

Nice To Haves

• Google Professional Cloud Architect would be an asset.
• Experience within Canadian financial institutions a benefit.

Responsibilities

• Design, develop, deploy and maintain cloud security tools in Google and Azure cloud environments.
• Collaborate in a team environment spanning multiple geographies to execute on support and project tasks and initiatives.
• Adapt SDLC processes to leverage cloud security tools, with an aim to shift-left vulnerability detection and remediation, expanding support levels towards a targeted 24/7 support model.
• Work with vendors and technology teams to maintain security compliance and software currency within our tools, platforms, and infrastructure.
• Be working from requirements, assist in planning, analysis, design, development, testing, and implementing solutions supporting security at the bank.
• Develop tools and scripts required by teams and end users using various cloud and application security tools.
• Report to management on the status of the system of internal controls with recommendations for remediation of risks.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Actively pursue effective and efficient operations of his/her respective areas in accordance with Scotiabank’s Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to, and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions and conduct risk.
• Champion a high-performance environment and contributes to an inclusive work environment.
• Writing and maintaining related documentation.
• Investigating, analyzing, and resolving system problems.

Benefits

• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level