Data Engineer

eTeam; Toronto; Hybrid; CAD 240,000 - 270,000; Full time

Benefits offered by this job

High-Innovation Tech Stack

Tier-1 Financial Footprint

Agile Autonomy

DevSecOps Impact

Job summary

Randstad Canada is seeking a Data Engineer III for a hybrid role in downtown Toronto. The position integrates AI-driven automated policy testing, multi-cloud data engineering, and DevSecOps governance within a prestigious financial institution.

Responsibilities include building testing frameworks, CI/CD integration, and real-time compliance dashboards. Start ASAP on a 4-month contract with potential extension or conversion based on performance.

Qualifications

• 5+ years of progressive experience within Cloud Security, DevSecOps, Cloud Data Engineering, or Systems Architecture roles.
• Multi-Cloud Mastery across GCP, Azure, and AWS.
• Proficient in Python for automation, testing, and tooling.
• IaC expertise with Terraform; experience deploying and scanning environments.
• CI/CD pipelines and GitHub Workflows/Actions.
• Agile experience with Jira/Confluence.
• Familiarity with policy engines (OPA, Sentinel) and cloud templates (Helm/ARM/JSON/YAML).

Responsibilities

• AI-Driven automated policy testing for CaC policies across GCP, AWS, and Azure.
• Design and maintain test frameworks and virtual test environments.
• Develop validation routines using Azure AI tools to detect compliance issues.
• Automate security scanning and validation of multi-cloud Terraform deployments.
• Collaborate with Security Architects and DevSecOps squads on guardrails and audits.

Skills

Cloud Security

DevSecOps

Cloud Data Eng

GCP

Azure

AWS

Python

Terraform

IaC

GitHub Actions

Jira

Confluence

Agile

OPA

Kubernetes

Sentinel

Tools

Terraform

GitHub

Kubernetes

Job description

Our client, is seeking a highly detailed and forward-thinking Data Engineer III to join their enterprise Cloud Compliance and Governance division. In this cutting-edge role, you will blend advanced ...

CA$240,000.00–CA$270,000.00 yearly

Full-time

The salary range listed reflects the base pay for this role at Altus Group and is provided where required by local regulations. Actual offers may differ based on experience, market conditions, and ...

Position Type: 4-Month Contract (Possibility of extension or conversion based on performance and business needs). Start Date: ASAP. Schedule: Monday to Friday, core business hours (37.5 hours per week / 7.5 hours per day). Work Location: Hybrid (2 days per week on-site at the downtown Toronto corporate office, 3 days remote. Core anchor days are Wednesday and Friday. On-site requirements may scale up to 4 days based on project delivery phases).

Advantages

• High-Innovation Tech Stack: Work at the bleeding edge of engineering by leveraging Azure AI Foundry, OpenAI models, and automated policy testing frameworks.
• Tier-1 Financial Footprint: Gain prestigious enterprise experience within one of Canada's leading financial institutions.
• Agile Autonomy: Benefit from a collaborative hybrid workspace structure with strong long-term extension and permanent conversion potential.
• DevSecOps Impact: Play a pivotal role in securing critical cloud landing zones, impacting multi-cloud policy workflows at a massive scale.

Responsibilities

• AI-Driven Automated Policy Testing
  • Design, implement, and maintain AI-driven automated test frameworks to validate the enforcement logic of Compliance-as-Code (CaC) policies across GCP, AWS, and Azure.
  • Establish virtual test environments using Azure Foundry and Azure ML to generate realistic, mock cloud topologies (network and IAM configurations) to simulate complex policy failure conditions.
  • Leverage Azure AI Search, Azure OpenAI, and Azure Machine Learning to architect intelligent validation routines that predict compliance anomalies and recommend remediation.
  • Develop comprehensive positive, negative, and edge-exception test cases, maintaining a robust test suite library that maps tightly back to banking regulations.
• Continuous Testing & CI/CD Integration
  • Embed AI-assisted compliance validation routines into CI/CD infrastructure using GitHub Actions and automated workflows.
  • Leverage GitHub Copilot for rapid scripting efficiency and utilize Copilot Studio to build streamlined, replicable policy templates.
  • Programmatically automate security scanning and behavioral validation of multi-cloud Terraform deployments using Python.
• Compliance Enforcement & Audit Readiness
  • Coordinate closely with Security Architects, Cloud Service Owners, and DevSecOps squads to define and test guardrails aligned with regulatory mandates (NIST, ISO 27001, SOC 2).
  • Build and test real-time monitoring and logging architectures to capture compliance violations as they happen.
  • Automate the generation of comprehensive compliance dashboards and reports utilizing industry telemetry platforms (e.g., Wiz.io, SonarQube, Splunk, Dynatrace).
  • Ensure all IaaS, PaaS, and SaaS code artifacts are fully traceable and auditable for internal risk assessments and external regulators.

Qualifications

• Experience: 5+ years of progressive experience within Cloud Security, DevSecOps, Cloud Data Engineering, or Systems Architecture roles.
• Multi-Cloud Mastery: In-depth engineering knowledge across Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS).
• Programmatic Automation: Highly proficient in Python for building automation test frameworks, scripts, and utility tools.
• Infrastructure as Code (IaC): Deep technical expertise configuring, deploying, and scanning Terraform environments.
• DevOps Pipelines: Solid experience managing code integration, automated validation rules, and templates via CI/CD pipelines (specifically GitHub Workflows/Actions).
• Agile Management: Daily working proficiency navigating and logging deliverables within Jira and Confluence.
• Soft Skills: Outstanding written and verbal communication skills. Self-motivated, meticulous attention to detail, and highly comfortable executing autonomously inside matrixed team environments.
• Nice-to-Have Skills & Assets:
• Active Cloud Architecture or DevSecOps engineering certifications (AWS, Azure, GCP, or HashiCorp).
• Prior technical experience within a banking or large financial institution.
• Experience with container infrastructure security and Kubernetes policy enforcement frameworks.
• Hands-on exposure to policy engines like Open Policy Agent (OPA), HashiCorp Sentinel, Azure Policy, or REGO.
• Familiarity with additional cloud templates and notation languages (Helm, ARM templates, JSON, YAML).

Summary

If you are a Data Engineer professional who wants to push the boundaries of automation by combining artificial intelligence with multi-cloud data security, this role is built for you. Bring your Python, Terraform, and pipeline governance expertise to an industry-leading financial team in downtown Toronto today!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to [e-mail] to ensure their ability to fully participate in the interview process.