Engineer II; Cloud Security AI Test Automation Engineer

Work Location

Toronto, Ontario, Canada

37.5 hours per week

Technology Solutions

$91,200 - $136,800 CAD

This role is temporarily eligible for a pay premium above the posted salary range that is reassessed annually. You are encouraged to have an open dialogue with your recruiter who can provide more specific pay details for this role.

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience  compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

We are looking for a detailed-oriented Cloud Security Engineer to join our team. This individual will focus on automating and validating compliance as code (CaC) policies across multi cloud environments including GCP, Azure and AWS. This role involves creating and implementing automated test cases to ensure these policies function as intended.

The engineer will integrate these tests into Git Hub based CI/CD pipelines using Git Hub workflows and Git Hub actions and leverage Terraform, Python, Power Shell.

• Design, develop, implement and maintain automated test frameworks for the behavior of existing compliance as a code policy across cloud environments (GCP/AWS/Azure) in alignment with banking regulations.
• Develop comprehensive positive, negative and edge exception test cases to validate policy enforcement logic.
• Build automated test pipelines integrated with CI/CD workflows to ensure continuous validation of CAC changes.
• Collaborate with CaC policy developers and security architects and Cloud Service Owners to understand intended behavior and failure conditions.
• Implement mock cloud environments/services/IAM to simulate realistic scenarios for policy testing.
• Maintain a test suite library and ensure traceability between compliance requirements validation cases and artifacts.

• Integrate compliance validation tests into CI/CD pipelines Git Hub Actions, Git Hub workflows and Terraform to enforce continuous compliance checks before deployment.
• Automate security scanning and validation of Terraform deployments with Power Shell and Python.
• Validate the enforcement of banking cloud security policies by embedding automated compliance checks into Dev Sec Ops  workflows and actions.

• Work closely with Banking security, Dev Sec Ops  teams, and Cloud Compliance governance teams to define and enforce cloud security controls in accordance with regulatory mandates.
• Validate cloud resource configurations against financial industry standards, (NIST, ISO 27001, SOC
  2).

• Implement/test logging and monitoring solutions to detect compliance violations in real time.
• Automate/validate the generation of compliance reports and dashboards using tools like Sonar Qube, Wiz.
  
  IO, Splunk.
• Ensure that all TD Standards & STIG requirements for IAAS, PaaS, SaaS CaC development, and testing activities are traceable and auditable for internal risk assessments and external regulatory audits.

• Strong Knowledge of GCP, Azure, AWS.
• 4+ years in Cloud Security, Dev Sec Ops , or Cloud Engineering roles.

Cloud infrastructure as a code - experience with Terraform, Helm, ARM, JSON, YAML

Compliance as Code (CaC)- Hands on experience with Hashi Corp Sentinel, Azure policy, Wiz policy, GCP Org policy and Open Policy Agent, Kubernetes

CI/CD Pipelines
- Experience with Git Hub actions, Jenkins

Scripting and Automation
- Proficiency in Python, Bash, Go, Power Shell, Terraform and automate testing framework.

Cloud Security & Compliance – Understanding of CIS benchmarks, NIST standards and security frameworks.

• Azure fundamentals certification, Azure security engineer associate, GCP fundamentals certification.
• Experience with multi cloud security testing GCP, Azure and AWS.
• Experience with Container security and Kubernetes policy enforcement.

University degree

Information security certification / accreditation an asset

5+ years of relevant experience

Work on cutting edge cloud security and compliance automation.

Be part of a DEV SEC OPS driven culture with CI/CD integrated security testing.

Collaborate with global teams to secure multi-cloud environments.

TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every…