CIAM Operations Support

Requisition ID: 278675

Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

If you are passionate about Site Reliability Engineering and Software Operations Management with a strong technical mindset, keen interest in authentication and security, and thrive in a fast-moving environment - this is the position for you!

Is this role right for you? In this role you will:

• Support enterprise-wide Customer Identity and Access Management (CIAM) services, including authentication, provisioning, federation, directory services, and related identity platforms.
• Act as a senior technical resource for CIAM SecDevOps and Operations, supporting secure, reliable, highly available enterprise identity services.
• Lead technical escalations and production incidents, adapting established procedures and approaches to specific situations, including 24x7 support, incident response, service restoration, and recovery coordination.
• Enhance existing SecDevOps processes, practices, automation frameworks, and engineering standards, with a focus on security, reliability, repeatability, and operational efficiency.
• Develop, maintain, and enhance CI/CD pipelines, incorporating automated build, testing, deployment, security scanning, vulnerability detection, and configuration validation.
• Embed security-by-design and shift-left security practices into CI/CD and application deployment processes.
• Support and enhance CIAM monitoring, observability, logging, and alerting frameworks, leveraging tools such as Splunk, Dynatrace, Sumo Logic, PagerDuty, and ServiceNow.
• Ensure applicable Scotiabank IT security, risk, regulatory, governance, and compliance requirements are incorporated into engineering and operational activities.
• Develop and continuously improve operational plans, procedures, automation, and runbooks to improve service delivery, time-to-market, security posture, system stability, resilience, and reliability.
• Measure and optimise system health and performance, identify technical bottlenecks and recurring issues, and drive improvements through automation and engineering solutions.
• Participate in defining and maintaining SLIs, SLOs and SLAs for enterprise CIAM services.
• Partner with development and engineering teams to troubleshoot application and integration issues, remediate security vulnerabilities, and safely roll out production fixes.
• Work closely with Scotiabank infrastructure, cybersecurity, cloud, network and platform teams, as well as technology partners, to support infrastructure upgrades, vulnerability remediation, patching, security hardening and software currency initiatives.
• Provide hands-on engineering and operational support for Linux-based environments, including Red Hat Enterprise Linux (RHEL), covering configuration, troubleshooting, patching, security hardening, performance analysis, and automation.
• Work collaboratively within a dynamic engineering team to configure, deploy, maintain, troubleshoot, and support IAM/CIAM solutions in accordance with approved architecture and security designs.
• Provide production support and handle escalations during business hours and, where required, during off-hours support and recovery activities.
• Lead or contribute to root cause analysis (RCA) for incidents affecting in-scope systems, identify corrective and preventative actions, and drive technical improvements through implementation.
• Support vulnerability management and remediation, working with application, infrastructure, cybersecurity, and engineering teams to address security findings and maintain platform currency.
• Create and maintain technical and operational documentation, including configuration guides, deployment procedures, support documentation, runbooks, recovery procedures, and architecture diagrams.
• Continuously identify opportunities to improve automation, platform security, operational resilience, monitoring, deployment quality, and engineering efficiency.

Do you have the skills that will enable you to succeed in this role? We’d love to work with you if you have:

• 5+ years of experience in application configuration, engineering, deployments, and production support of large, complex, highly available enterprise systems.
• Strong hands-on experience with Linux/Unix environments, preferably Red Hat Enterprise Linux (RHEL), including configuration, troubleshooting, system administration, patching, security hardening, performance analysis, and production support.
• Strong understanding of Linux security fundamentals, including file permissions, service management, system logs, certificates, TLS configuration, patching, vulnerability remediation, and OS hardening.
• Experience with cloud and container technologies such as Docker, Kubernetes, Microsoft Azure, GCP and PCF, particularly in supporting secure and scalable enterprise applications.
• 5+ years of hands-on experience developing and supporting CI/CD and SecDevOps pipelines to build, scan, test, package, and deploy code across production and pre-production environments.
• Experience integrating security scanning and vulnerability controls within CI/CD pipelines, supporting shift-left security practices.
• 4+ years of experience with configuration management and Infrastructure-as-Code technologies such as Ansible, Terraform, Chef, or Puppet.
• Strong hands-on scripting and automation experience using technologies such as Python, Bash, Java and Ansible.
• 4+ years of hands-on experience supporting customer-facing applications deployed using containers and/or public cloud platforms such as Microsoft Azure.
• Proficiency with Continuous Integration and Continuous Delivery technologies and toolchains, including Jira, Jenkins, Gradle, Bitbucket and Artifactory.
• Strong understanding of networking and application communication concepts, including TCP/IP, DNS, HTTP/HTTPS, TLS, certificates, load balancers and firewalls.
• Experience with vulnerability remediation, patch management, software currency, security hardening and secure configuration management.
• Working knowledge of IAM/CIAM concepts, including authentication, authorisation, federation, identity provisioning and directory services.
• Strong working experience with incident, problem and change management, including monitoring, alerting, troubleshooting, service restoration, root cause analysis and preventative remediation.
• Experience with enterprise monitoring and observability technologies such as Splunk, Dynatrace, Sumo Logic and PagerDuty, as well as IT service management platforms such as ServiceNow.
• Strong troubleshooting and problem-solving skills for complex CIAM, application, Linux, infrastructure, network and security-related issues.
• A proactive approach to identifying operational risks, security vulnerabilities, performance bottlenecks, repetitive manual activities, and opportunities for automation and continuous improvement.
• Ability to create and maintain technical documentation, including configuration guides, deployment procedures, operational runbooks, troubleshooting guides and architecture diagrams.
• Excellent verbal and written communication skills with the ability to work effectively across application development, cybersecurity, infrastructure, architecture and operations teams.
• Ability to work independently, take technical ownership of complex problems, manage competing priorities, and contribute effectively within a fast-paced, highly available production environment.

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more

Location(s): Canada : Ontario : Toronto

Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.

At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.