Job Description

Our Banking Client is seeking a Software Engineer - 5 to support its Enterprise Security Services team. In this role, you'll help drive the development of Policy-as-Code solutions within the organization's cloud environment. This is an exciting opportunity to work with a leading Canadian bank, using cloud tools and collaborating closely with the DevOps team. Must-haves for this role include strong experience writing Rego Policy-as-Code, expertise with cloud security (Terraform, cloud resources), and familiarity with application security scanning tools like SAST, DAST, SCA, and MAST.
Job Role: Software Engineer - 5
Job Location: Toronto, ON/Hybrid
Candidate Requirements/Must Have Skills:
1) 10+ years' experience in related fields: Security Engineering, Cloud architecture, Security Operations, DevOps
2) 3-5 years' experience with IaC (Infrastructure As Code) tool Terraform
3) 1-2 years' experience with PaC (Policy As Code) tools Styra, Rego
4) 3-5 years' experience with DevOps tools and strategies, including VCS, IaC, and automated pipelines
5) 3-5 years hands-on experience with Cloud platforms (Google Cloud, Azure, AWS - in order of preference)
Nice-To-Have Skills:
1) Experience with programming languages (Python, GO, Rego)
2) CI/CD tools experience
3) CNAPP experience
4) Experience from software delivery industry
5) Agile experience
Soft Skills Required:

• Able to maintain updated and consistent documentation about workflows, test results, change tickets and PoC implementations that are relevant for the team to reference.
• Able to prepare status updates and socialize them with team members and stakeholders.
• Collaboration skills to work with stakeholders like Platform Engineering and Security Architecture to align on the policies deployments.
• Proactively propose best practices to implement in our development and delivery lifecycles.

Best VS. Average Candidate:
Ideal candidate has strong project experience, deployment of IaC to the cloud types projects; security engineers and cloud architects, devops title roles; best would be a DevOps background