Our financial services client is seeking a Security Specialist IV (8+ years of experience) to automate and validate Compliance-as-Code policies using GCP, Azure, AWS, Python, Terraform, and CI/CD pipelines -

Join a cloud security initiative focused on automating regression testing and advancing Compliance-as-Code validation across multi-cloud environments.

This role supports AI-driven automated testing, cloud security enforcement, and DevSecOps integration within banking-focused cloud settings using GCP, Azure, AWS, Python, Terraform, and GitHub workflows.

The position offers exposure to cloud security, AI technologies, and enterprise-scale compliance initiatives within a large banking setting.

Contract, Toronto, Hybrid, 2 days onsite

Must Haves
8+ years in Cloud Security, DevSecOps, AI, or Cloud Engineering roles
3+ years of Technical Lead experience
Solid knowledge of GCP, Azure, and AWS
Proficient with Python, Terraform, CI/CD pipelines, Jira, and Confluence
Degree or Diploma; Masters or PhD preferred

Nice to Have
Cloud or DevSecOps engineering certifications
Container security and Kubernetes policy enforcement




Hands-on experience with HashiCorp Sentinel, Azure Policy, Wiz Policy, GCP Org Policy, Open Policy Agent, and Kubernetes
Cloud infrastructure as code using Helm, ARM, JSON, YAML, and REGO
Banking or financial institution experience

Responsibilities
Design, develop, implement, and maintain AI-driven automated test frameworks for Compliance-as-Code policies across GCP, AWS, and Azure environments
Implement AI-driven test environments using Azure Foundry and Azure ML to simulate and test cloud policies
Develop positive, negative, and edge exception test cases to validate policy enforcement logic
Integrate AI-assisted compliance validation into CI/CD pipelines, GitHub Actions, and GitHub workflows
Automate security scanning and validation of Terraform deployments using Python
Validate cloud resource configurations against NIST, ISO , and SOC 2 standards
Automate and validate compliance reporting and dashboard generation using SonarQube, Wiz.IO, Splunk, Dynatrace, and AppOmni

Required Skill Profession

Computer Occupations

📌 Sr Security Specialist To Automate And Validate Compliance As Code Policies Using Gcp, Azure, Aws, Python, Terraform, And Ci/cd Pipelines 58181 Toronto
🏢 S.i. Systems
📍 Toronto