Title:  CIAM Operations Support Lead

Requisition ID: 278669 

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

If you are passionate about Site Reliability Engineering and Software Operations Management with a strong technical mindset, keen interest in authentication and security, and thrive in a fast-moving environment - this is the position for you! 

Is this role right for you? In this role you will:

• Lead CIAM SecDevOps and Operations, ensuring secure, consistent, automated, resilient, and scalable deployment and production support models.
• Lead the development, orchestration, security integration, and continuous improvement of CI/CD pipelines and SecDevOps automation frameworks.
• Embed security-by-design and shift-left security practices across the CI/CD lifecycle, including automated code, dependency, vulnerability, configuration, and security scanning.
• Oversee the development and continuous improvement of CIAM observability, monitoring, alerting, and operational health frameworks.
• Manage the CIAM operations and production support team; optimise workflows and mentor direct reports to maximise business, security, and technical effectiveness.
• Manage escalations and production incidents, adapting established procedures and approaches to specific situations, including 24x7 production support, incident response, service restoration, and recovery coordination.
• Own and continuously enhance SecDevOps processes, engineering standards, automation, security controls, and operational practices.
• Build and maintain production monitoring and observability frameworks leveraging tools such as Splunk, Dynatrace, Sumo Logic, PagerDuty, and ServiceNow.
• Drive proactive vulnerability remediation, software currency, security hardening, patching, and configuration compliance across CIAM platforms.
• Provide technical leadership for Linux-based environments, including RHEL, covering administration, troubleshooting, patching, security hardening, performance analysis, automation, and production support.
• Ensure compliance with all applicable Scotiabank IT risk, security, regulatory, governance, and compliance requirements.
• Lead by example to develop operational plans, engineering standards, and procedures that improve time-to-market, security posture, service availability, resilience, and system reliability.
• Measure and optimise system performance, availability, security, and operational health to continuously improve CIAM capabilities.
• Participate in defining and managing SLIs, SLOs and SLAs for enterprise CIAM services.
• Act as a subject-matter expert for CIAM SecDevOps, guiding teams through SecDevOps maturity, automation, cloud adoption, identity security, vulnerability management, and secure engineering best practices.
• Partner with application development and engineering teams to investigate production issues, identify root causes, remediate security vulnerabilities, and safely deploy fixes.
• Work closely with Scotiabank infrastructure, cybersecurity, cloud, network, database, and platform teams to maintain CIAM infrastructure and deliver infrastructure upgrades, security remediation and software currency initiatives.
• Provide production support and escalation during business and off-hours. Apply sound and rapid judgement to incidents and security events, recommending workarounds or permanent resolutions that minimise service disruption and unplanned production outages.
• Perform risk assessments, security reviews, vulnerability assessments, and control reviews for CIAM implementations and recommend appropriate mitigation strategies.
• Create and maintain technical documentation, including architecture diagrams, security designs, configuration guides, operational procedures, support playbooks, and recovery documentation.
• Establish effective working relationships across business, cybersecurity, infrastructure, architecture, application development, programme, and project management teams.
• Understand how the Bank’s risk appetite and risk culture apply to day-to-day engineering, security, operational, and technology decisions.
• Champion a customer-focused and security-first engineering culture, fostering collaboration across business, security, infrastructure, and technology teams.
• Champion a high-performance, accountable, collaborative, and inclusive work environment.

Do you have the skills that will enable you to succeed in this role? We’d love to work with you if you have:

• 7+ years of experience as an Operations lead, SecDevOps/DevOps Lead, SRE Lead, Engineering Lead, or equivalent role within a large enterprise product or platform team.
• 7+ years of experience in application engineering, deployments, security, and production support for large, complex, highly available enterprise systems.
• Strong experience with Linux/Unix platforms, preferably Red Hat Enterprise Linux (RHEL), including system administration, troubleshooting, patching, security hardening, performance analysis, shell scripting, and production support.
• Strong understanding of Linux security concepts, including file permissions, service management, certificates, TLS configuration, system logs, vulnerability remediation, and operating-system hardening.
• Experience with cloud and container technologies such as Docker, Kubernetes, Microsoft Azure, Google Cloud Platform (GCP), and PCF, particularly in building secure, automated, self-service platforms.
• Sound knowledge of networking concepts including TCP/IP, DNS, HTTP/HTTPS, TLS, firewalls, load balancing, proxies, certificates, and the OSI model.
• Strong understanding of multi-tier applications, distributed systems, microservices architectures, containerised workloads, and cloud-hosted software stacks.
• 5+ years of hands-on experience creating and managing CI/CD or SecDevOps pipelines to build, scan, test, package, and deploy applications across production and pre-production environments.
• Hands-on experience integrating security controls and vulnerability scanning into CI/CD pipelines, supporting a shift-left security model.
• 5+ years of experience with configuration-management and Infrastructure-as-Code technologies such as Ansible, Terraform, Chef, or Puppet.
• Strong scripting and automation experience using technologies such as Python, Bash, Java, and Ansible.
• Experience with enterprise CI/CD and engineering toolchains such as Jenkins, Gradle, Bitbucket, Artifactory, and Jira.
• Strong experience with vulnerability management, security remediation, software currency, patch management, certificate/TLS management, and platform security hardening.
• Strong working knowledge of IAM/CIAM concepts, including authentication, authorisation, identity lifecycle management, privileged access, federation, and secure identity integrations.
• Strong experience with incident, problem, and change management, including implementation of monitoring, alerting, service recovery, root-cause analysis, and preventative remediation.
• Experience with observability and monitoring platforms such as Splunk, Dynatrace, Sumo Logic, PagerDuty, and ServiceNow.
• Excellent problem-solving and troubleshooting skills for complex IAM, CIAM, Linux, infrastructure, security, and application integration issues.
• Strong understanding of security-by-design, least privilege, defence-in-depth, secure configuration, vulnerability remediation, and risk-based security principles.
• Excellent communication, leadership, organisational, and time-management skills, with a strong work ethic and reliability.
• Ability to develop high-quality technical documentation, including architecture and security diagrams, configuration guides, operational procedures, runbooks, and support documentation.
• Experience developing communications, briefings, technical recommendations, and presentations for senior executives and technology leadership.
• Proven success working within a matrix organisation and leading or influencing cross-functional engineering, infrastructure, cybersecurity, architecture, and business teams, including senior management.
• Strong prioritisation, planning, analytical, presentation, project/change management, stakeholder management, and relationship-building skills.

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more

Location(s):  Canada : Ontario : Toronto 

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.  

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our  Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.