Security engineer – Data encryption
TD Canada Trust’s Technology Solutions Department based in Toronto, ON is inviting applications from suitable candidates for the position of Security engineer. TD Canada Trust’s Technology Solutions Department is dedicated to advancing banking services through innovative technology. It provide robust IT infrastructure, digital platforms, and security systems crucial for seamless banking experiences. TD Canada Trust ensures efficient operations and secure transactions, enhancing customer satisfaction. Its market approach focuses on staying ahead in digital banking and meeting customer demands. The candidates selected for the vacancy will be required to start the work as soon as possible.
Job Description:
Employer Name: TD Canada Trust
Department: Technology Solutions
Position: Security engineer – Data encryption
No of Vacancies: 3
Salary: Salary is not mentioned, $65.00 – $70.00 hourly estimated salary
Employment Type: Full time
Location: Toronto, ON, CA
Shift: 37.5 Hours/Week
Work Option: Hybrid
Requisition ID: R_1354322
Requirements:
Languages: Candidates must have knowledge of the English Language
Education: Candidates need standard educational qualifications such as a Secondary (high) school graduation certificate or equivalent experience
Experience: Candidates should have 3+ year experience in Cryptography domain
Physical Requirements:
- The candidates should thrive in a fast-paced environment, managing multiple deadlines and priorities effectively
- The candidates should demonstrate the ability to adapt to new, different, or changing requirements, quickly grasp new concepts, and reflect on lessons learned
- The candidates should have the capability to define problems, challenges, identify alternatives, and make timely decisions
Other Requirements:
- The candidates should have in-depth knowledge of technologies and security controls for protecting data at rest and data in transit and Employment experience in the Financial industry is a plus and demonstrate the ability to make engineering design decisions and solve problems related to cryptographic principles and Alignment with departmental strategies and delivering superior results in both short and long terms
- The candidates should be familiar with NIST 800-Series Special Publications, particularly in respect to cryptography, and understand FIPS 140-3 certification levels for cryptographic modules and deep understanding of PCI DSS requirements for data protection and collaborate with Internal Engineering, Deployment and Operations teams to drive design adoption across IT and Attention to detail and strong follow-through on tasks should be a hallmark
- The candidates should understand the principles of Post-Quantum Cryptography and its standardization and in-depth knowledge of various cryptographic and encryption technologies and standards, including Symmetric, Asymmetric cryptography, PKI, Digital Signing, and Hashing
- The candidates should demonstrate the ability to translate complex technical concepts into business values and outcomes for effective communication with Senior Leadership and non-technical Business partners and working knowledge of the Microsoft Office suite for developing presentation decks, design documentation, drawings, and reports
- The candidates should have experience with Cryptography as it applies to Cloud Solutions in Highly Virtualized Environments and Strong verbal and written communication skills are essential for this role and An industry-recognized IS Security certification CISSP and expertise in either Windows, Unix, Linux Databases (including MS SQL, Oracle and MongoDB) or Storage (SAN and NAS)
- The candidates should act as a key contributor to developing solution structure and framework for cryptographic protection of data in complex environments and Working knowledge of Mainframe cryptography and Mainframe HSM and Experience with data protection against Ransomware
- The candidates should contribute input into and lead the development of solution documentation, System Requirements, Cryptography and Data Protection Policies, Procedures, Standards, and Guides and capable of developing and documenting design patterns for adoption by engineering partners and experience in selecting and assessing security tools and solutions that best meet the stated security
- The candidates should demonstrate the ability to create high-level and technical-level presentations and present to technical and non-technical audiences and Senior Management and possess knowledge of the Regulatory and Compliance landscape pertaining to the Financial Industry and produce technical and analysis documentation, reports, and summaries
- The candidates should be able to establish and maintain effective working relationships with all levels of personnel both internally and externally, such as Senior Management, peers, clients, and vendors and solid analytical, reasoning, organizational, and time management skills
- The candidates should provide subject matter expertise consulting services to business partners and Planning, scheduling, running, and managing working meetings and producing meeting minutes should be within the candidate’s skill set and Management of communications and activities with 3rd party solution and service providers is crucial
Responsibilities:
- The candidates should be able to implement cryptographic protection for Data at Rest and Data in Transit, ensuring data remains secure and confidential
- The candidates should be able to establish and enforce Cryptography Governance, including developing Policies, Procedures, Standards, and Guides to govern cryptographic operations effectively
- The candidates should be able to implement and manage Database Transparent Data Encryption (TDE) and encryption in transit solutions to safeguard sensitive data
- The candidates should be able to deploy and manage data protection strategies in Public Cloud environments Azure, Google Cloud using industry-standard cryptographic techniques and implement and manage Thales Vormetric or CipherTrust Data At Rest Encryption solutions for enhanced data security
- The candidates should be able to work with Hardware Security Modules (HSM) from vendors like Thales, Entrust, Utimaco, and Atalla to ensure secure key storage and cryptographic operations
- The candidates should be able to utilize cryptographic tools such as Venafi for managing digital certificates and ensuring secure communications and manage PKI (Public Key Infrastructure) operations, including x509 Digital Certificates, SSH keys, Microsoft ADCS, and TLS ciphers
- The candidates should be able to implement Key Lifecycle Management practices for symmetric and asymmetric keys to ensure secure key generation, storage, distribution, and retirement
- The candidates should be aware of and prepared to implement Post-Quantum Cryptography techniques to future-proof cryptographic solutions against emerging quantum computing threats
Benefits:
- The candidates will get health and well-being benefits, savings and retirement programs
How to apply:
If the position is fit for you and the basic requirements are fulfilled then you can now apply directly to the employer (along with your resume) through the below-mentioned details.
We thank all the applicants for showing their interest and trust in us, however, only the most eligible candidates will be selected and conducted for further procedure directly from employers, in between no charges/fees or original documents will be asked from any applicant. All the best!