Verafin – Principal Developer (Cloud Security)

Nasdaq•Toronto, ON

8d•$140,000 - $196,000•Hybrid

About The Position

We're looking for a Principal Developer to join our Cloud Security team. In this role, you'll shape how we design, build, and operate secure cloud systems at scale — embedding security into the way we engineer, not bolting it on after the fact. You'll thrive here if you're an expert level individual contributor who enjoys solving complex security problems, influences technical direction across teams, and is passionate about making security an enabler of innovation rather than a blocker.

Requirements

Bachelor's degree in Computer Science, Engineering, or a related field — or equivalent practical experience.
7+ years of software engineering experience, with deep expertise in cloud security and cloud-native architecture.
Proven track record of delivering complex, cross-functional security initiatives with measurable outcomes.
Strong ability to influence and inform leadership on security decisions, mentor developers, and serve as a subject-matter expert across multiple engineering domains.
Clear communicator who can translate security concepts for both technical teams and non-technical stakeholders.

Nice To Haves

Experience in financial services, fintech, or regulated industries.
Relevant cloud or security certifications (e.g., AWS Security Specialty, CISSP, CCSP).
Hands-on experience with security standard creation, threat detection tooling, or AI-driven security practices.

Responsibilities

Set the technical direction for cloud security across our AWS environment, guiding how security is built into platform engineering and development workflows.
Design and scale enterprise-grade security controls — including identity boundaries, cloud security standards, and policy enforcement frameworks.
Serve as the senior technical expert on the Cloud Security team, reviewing security risks and helping teams build secure-by-default systems.
Own and drive high-impact security initiatives, such as compliance strategy implementation, cloud risk reduction programs, and next-generation security platform development.