Principal Engineer

Scotiabank; Toronto; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

DEI & Allyship

Accessibility & Accommodations

Upskilling opportunities

Competitive rewards

Community engagement

Job summary

Scotiabank is seeking an experienced Cloud Security Engineer to shape the long-term cloud strategy and support modernization across GCP and Azure. You will lead the design of scalable Kubernetes platforms, automate provisioning with Terraform, and drive secure, compliant workflows.

You will mentor engineering teams, collaborate with security and networking groups, and help establish policy enforcement, IAM, workload identity, and secure deployment practices. This role sits in Toronto, Canada.

Qualifications

• 8+ years designing and implementing Kubernetes platforms (GKE/AKS) in enterprise environments.
• 5+ years advanced Terraform and IaC with multi-environment deployments and remote state management.
• 5+ years cloud services experience (GCP, Azure) including IAM, networking, security and storage.
• 5+ years CI/CD and GitOps with GitHub Actions, Jenkins, Argo CD, Helm or similar.
• Strong containerization knowledge: Docker, networking, ingress, autoscaling, service mesh.

Responsibilities

• Design and implement enterprise-grade cloud infrastructure and Kubernetes platforms on GCP GKE and Azure AKS.
• Develop and maintain reusable IaC solutions with Terraform across multi-cloud environments.
• Implement scalable, secure Kubernetes with networking, ingress, autoscaling, observability, and DR capabilities.
• Design CI/CD and GitOps workflows for automated deployment, governance, and platform operations.
• Build scalable Cloud/AI platforms for enterprise security use cases.

Skills

Kubernetes (GKE/AKS)

Terraform IaC

GCP & Azure Cloud

CI/CD & GitOps

Docker & Networking

RBAC & workload identity

Secrets management & policy

Python/Bash scripting

Cloud security best practices

Communication & leadership

Training delivery

Tools

GitHub Actions

Jenkins

Argo CD

Helm

Job description

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

Contributes to the overall success of the Cloud Security Engineering function by ensuring long‑term technical vision and roadmap is defined and maintained, focusing on future development, scalability, security, resiliency and platform modernization.

Is this role right for you? In this role you will:

• Design, implementation of enterprise-grade cloud infrastructure and Kubernetes platforms on GCP GKE and Azure AKS environments..
• Develop and maintain reusable Infrastructure as Code (IaC) solutions using Terraform to automate provisioning, configuration, and lifecycle management across multi-cloud environments.
• Implement scalable, secure, and highly available Kubernetes solutions including networking, ingress, autoscaling, observability, and disaster recovery capabilities
• Design and integrate CI/CD and GitOps workflows to support automated application deployment, platform operations, compliance, and infrastructure governance..
• Design and build scalable Cloud/AI platforms and components for Enterprise security use cases
• Provide technical leadership and mentorship to engineering teams while driving cloud platform standards, operational excellence, automation strategies, and continuous improvement initiatives.
• Collaborate with security, networking, and application teams to implement cloud security best practices including IAM, RBAC, workload identity, secrets management, and policy enforcement.
• Continuously refine and enhance deployment processes, onboarding workflows, and implementation guidelines.
• Create and maintain technical documentation, including architecture diagrams, configuration guides, troubleshooting guides, and operational procedures.
• Establish effective working relationships across multiple technology and business partners, project teams, and stakeholders.
• Understand how the Bank’s risk appetite and risk culture should be considered in day-to-day activities and decisions.
• Champion a customer‑focused engineering mindset and contribute to a collaborative and inclusive work environment.

Do you have the skills that will enable you to succeed in this role? We’d love to work with you if you have:

• 8+ Years of hands‑on experience designing and implementing Kubernetes platforms using GKE and Azure AKS in enterprise environments
• 5+ years of Advanced proficiency with Terraform and Infrastructure as Code (IaC) practices including modular design, remote state management, workspace strategy, CI/CD integration plan and multi‑environment deployments
• 5+ years of Experience in GCP and Azure Cloud services including networking, IAM, load balancing, storage and security services.
• 5+ years of Experience implementing CI/CD and GitOps workflows using tools such as GitHub Actions, Jenkins, Argo CD, Helm or similar automation platforms
• Strong knowledge of containerization technologies including Docker, Kubernetes networking, ingress controller, autoscaling and service mesh concepts.
• Experienced with Cloud and Kubernetes security best practices including RBAC, workload identity, secrets management, vulnerability management and policy enforcement.
• Strong Scripting and automation skills using Python, Bash or similar languages.
• Solid knowledge of cybersecurity principles, risk management, and compliance frameworks.
• Excellent problem‑solving and troubleshooting skills. Strong work ethic and reliability
• Excellent communication and time management skills
• Experience delivering training using virtual conferencing
• Ability to develop technical documentation, including architecture diagrams, configuration guides, and operational procedures.
• Ability to prepare communications, briefings, and technical summaries for senior stakeholders when required.
• Proven success working within a matrix organization and collaborating across cross‑functional teams.
• Strong prioritizing, planning, analytical, presentation, project/change management, and relationship building skills

What's in it for you?

• Diversity, Equity, Inclusion & Allyship-We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias‑free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations- We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskillingthrough online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know.