About this role
Cloud Security Architect-Cloud & Platform Engineering
Requisition ID: 261087 Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. Scotiabank continues to be an industry leader for Payments technology and innovation. We have a history of safely leveraging new tools to enable new experiences for our customers, focusing on ensuring we protect their interests and goals. The result of this leads to modernization programs which aim to offer enriched information and transparencies to support the rapidly evolving payments community. The Role The Cloud Security Architect ensures continuity and maturity of Cloud Security and CNAPP architecture, including CSPM, CIEM, CWPP, and IaC controls, which are foundational to securing bank's cloud platforms. This strategic senior role owns day‑to‑day architecture decisions, platform integrations, and risk-driven design aligned with enterprise security standards. What You’ll Do: Lead CNAPP architecture & rollout across multi-cloud and Hybrid solutions, including integration patterns and operationalization design. Design multi-cloud / hybrid security solutions covering data protection, IAM, and threat management for enterprise workloads and global user base. Define security controls through policy as Code (e.g., OPA, CNAPP tool's OOTB policies, Cloud Fabric policies), aligned to enterprise standards and design its integrations points to ensure posture security, vulnerability management and remediation workflows are in place. Define and publish Security Reference Architectures and reusable patterns (secure-by-design) for engineering adoption across platforms and products.Partner with platform engineering / DevSecOps teams to integrate scanning and controls into CI/CD (e.g., Terraform Cloud, GitHub Actions, Azure DevOps), including risk decisions and exceptions. Own cloud security architecture artifacts (diagrams, deep dives, capability views) and communicate target/current state to stakeholders. Provide advisory and architecture reviews (TRA / governance forums), identify gaps, recommend pragmatic remediation, and align to delivery timelines. Support audit and compliance evidence through control documentation,