DevSecOps Engineer I

The DevSecOps Engineer is an engineering role that will help support and deploy solutions to support TD's software delivery initiatives. The role is highly technical, and candidates must possess a solid understanding of information security, cloud infrastructure, and software. The DevSecOps Engineer supports continuous integration and continuous deployment (CI/CD) initiatives. The role is heavily security-focused and ingrained in the CI/CD pipeline automation to deliver security and privacy by design principles and validation throughout the software lifecycle.

The DevSecOps Engineer has a strong work ethic, performs analytical and critical thinking, and is masterful at meeting change requests on demand. They are expected to work well with business units and possess superior listening and communication skills, in addition to expected technical expertise. The DevSecOps Engineer embodies security-first principles, constantly assesses the threat landscape, and adapts quickly to manage enterprise risk, as well as integration, configuration, and deployment requirements.

KEY ACCOUNTABILITIES

• Leverage deep technology expertise for own area of specialization to deliver and ensure that all areas across the organization that provision, manage and support various technologies have the necessary tools, processes and documentation required to effectively execute on their respective mandates

• Execute on Engineering strategy as it relates to the introduction of tools and the automation of build, test, release and configure activities across Application, Platform and Infrastructure

• Partner with the Operations team to automatically integrate with appropriate tools and processes as part of automated/self-serve Application, Platform or Infrastructure releases

• Work with partners across Technology and apply in-depth understanding of relevant business needs to identify and leverage synergies across the various areas

• Act as the expert or lead innovator and agent of change for the programs and services under management

• Work with other teams to implement best practices for engineering and management

• Work with vendor platform providers and engineering peers to keep abreast of trends, products, frameworks, and applications

• Identify and effectively manage stakeholder engagement and impacts across the enterprise

• Interpret client needs, assess engineering related requirements and identify solutions to non-standard requests

• Apply best practices and knowledge of internal / external business issues to improve products or services in own discipline

• Monitor and control costs within own work

• May interact with governance and control groups, (e.g. regulatory / operational risk, compliance and audit) to provide subject matter expertise and consult on risk issues / items related to Engineering technology and tools

• May develop and/or contribute to negotiations of third-party contracts/agreements

• Maintain knowledge and understanding of external development, engineering and emerging solutions, market conditions and their impact

• Proactively identify emerging technologies and innovative solutions for building more robust platform domains

• Continuously enhance knowledge/expertise in own area and keep current with emerging industry trends, new technologies and best practices in the external market that can contribute to delivering effective client solutions

• Prioritize and manage own workload in order to deliver quality results and meet timelines

• Support a positive work environment that promotes service to the business, quality, innovation and teamwork and ensure timely communication of issues/ points of interest

• Participate in knowledge transfer with senior management, the team, other technical areas and business units

• Work effectively as a team, supporting other members of the team in achieving business objectives and providing client services

• Identify and recommend opportunities to enhance productivity, effectiveness and operational efficiency of the business unit and/or team

• Advanced knowledge of specific domain or range of engineering frameworks, technology, tools, processes and procedures, as well as organization issues

• Advanced knowledge of TD applications, systems, networks, innovation, design activities, best practices, business / organization, Bank standards an asset

• Advanced experience, knowledge and skills in own discipline

• Works independently with minimal guidance

• Acts as a SME resource for colleagues with less experience

• Solves complex problems; takes a new perspective on existing solutions

• Generally reports to a Manager or above

EXPERIENCE & EDUCATION

• University or post-graduate degree

• Strong academic background (e.g., computer science, engineering)

• 5-7 years relevant experience

PREFERRED QUALIFICATIONS

• Deep knowledge of Java, Python, and/or Golang

• Demonstrated knowledge of cloud provisioning and administration, cloud bursting, cloud interoperability, cloud disaster recovery, and business continuity strategies, as well as performance measurement and monitoring in cloud environments

• Excellent written and verbal communication skills across a breadth of personas

• Highly developed critical thinking, analytical, and problem-solving skills, including the ability to troubleshoot application incidents with operations teams

• Experience working with development and infrastructure teams in agile workflows, including Scrum and Kanban

• Understanding of containerized compute (e.g., Docker) and container orchestration (e.g., Kubernetes)

• Experience with GitHub, Terraform, Jenkins, or Ansible

• Experience with operations and security across Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP) and ability to work with cloud IaaS and PaaS service offerings

• Capable of scripting in Python, Bash, and PowerShell

• Understanding of the software development lifecycle (SLDC) and how to balance the recommendations of each against business priorities and security requirements

• Experience working in highly regulated environments is a must

• #LI-Tech