Information Security Specialist

Information Security Specialist - Cloud Security Architect (Containers & Kubernetes) Work Location: Toronto, Ontario, Canada Hours: 37.5 hours per week Line Of Business: Technology Solutions Pay: $91,200 - $136,800 CAD TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job‑related knowledge, geographic location, and other specific business and organizational needs. As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role. Job Description Building a World‑Class Technology Team at TD. We can't afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open‑minded in the way we think about technology. TD's technology and business teams become more intertwined as new opportunities present themselves. This new era in banking does not equal boring. Not at TD, anyway. TD Information Security covers the development and management of security strategies, policies, and programs to assess, prioritize, and mitigate business risk with technology controls. Priorities include: mitigating and managing cyber security threats, ensuring systems availability, aligning with global regulatory risk and compliance requirements, managing systems and network complexity, and partnering with businesses for better technology delivery by providing advice on technology controls. There’s room to grow in all of it. About This Role The Cloud Security Architect – Containers & Kubernetes Specialty is responsible for designing, implementing, and governing secure container platforms and Kubernetes environments across public cloud and hybrid deployments. This role will lead the development and maintenance of Security Technical Implementation Guides (STIGs) for containerized workloads, container registries, Kubernetes clusters, and related CI/CD processes. Key Responsibilities Develop and maintain Kubernetes and container security STIGs, including baselines for cluster configurations, container runtimes, image registries, Helm charts, and ingress controllers. Map STIGs to frameworks such as CIS Kubernetes Benchmarks, CIS Docker Benchmarks, NIST 800-53, and Zero Trust Architecture. Ensure continuous updates aligned with new Kubernetes releases and emerging threats in the container ecosystem. Architect secure Kubernetes and container‑based solutions across AWS, Azure, GCP, and hybrid/on‑prem environments. Define secure configurations for Kubernetes components (API server, etcd, controller manager, scheduler, kubelet). Establish and maintain zero‑trust and least‑privilege principles for workloads, service accounts, and cluster access. Design secure deployment patterns for microservices, service mesh, and container networking. Oversee integration of container security controls into CI/CD pipelines. Support automated policy enforcement using Infrastructure as Code. Support continuous compliance scanning for misconfigurations, vulnerabilities, and drift. Define cluster governance, including namespace strategy, admission controls, RBAC, network policies, and logging standards. Maintain end‑to‑end security posture across containerized workloads. Mentor team members in secure container deployment practices and guide technical leadership on platform evolution, tooling, and best practices. Job Requirements University Degree in Computer Science, Cybersecurity, or related field (or equivalent experience). Information Security and Kubernetes certification. 7+ years in information security with 3+ years in Kubernetes or container platform security. Proven experience developing and maintaining Security Technical Implementation Guides (STIGs) or equivalent security baselines. Deep expertise in public cloud Kubernetes as a Service products. Strong understanding of Kubernetes RBAC, Pod Security, Network Policies, Ingress security, and Secrets management. Hands‑on experience with IaC tooling. Familiarity with container security scanning tools. Experience with CI/CD integration and DevSecOps governance. Additional Information Inspire a positive work environment and help champion quality, innovation, teamwork, and service to the business. Learn voraciously and stretch your thinking. Who We Are TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to the Bank, those we serve, and the economies we support. We are guided by our vision to Be the Better Bank and our purpose to enrich the lives of our customers, communities and colleagues. Language Requirement (Quebec Only) Sans Objet Seniority level: Mid‑Senior level Employment type: Full‑time Job function: Information Technology Industries: Banking #J-18808-Ljbffr