Data Security Engineer

BUSINESS UNIT DESCRIPTION The Data Protection Service (DPS) team designs, develops, delivers, and maintains security services across certificate management and data discovery domains. By integrating leading-edge security systems and driving continuous improvement, DPS protects the bank, its data, and its clients from cybersecurity threats and data protection risks. The team collaborates with infrastructure, cloud, DevOps, and risk partners to deliver scalable, automated, and resilient security solutions aligned with enterprise standards and regulatory requirements.

JOB PURPOSE: The Application Developer (DSP/DCLM) is a key contributor to CIBC's Data Protection Service (DPS) team, responsible for the technical design, integration, and deployment of information security application systems. This role delivers flexible, scalable solutions that strengthen cybersecurity and enhance certificate management across the enterprise. The incumbent serves as a technical lead and subject matter expert, ensuring the delivery of secure, cost-effective, and innovative solutions, while providing ongoing expert support post-implementation.

Rotational after-hours and weekend support is required. KEY ACCOUNTABILITIES Design & Develop: Lead the analysis and documentation of business requirements, estimate work packages, and coordinate end-to-end implementation of security tools and technology solutions. Design and develop cost-effective, innovative solutions to meet business objectives, while maintaining and enhancing existing applications.

Collaborate with CTPRT business analysts, Enterprise Architecture, Cyber Security, Information Security, network engineering, and security engineering teams to understand requirements and deliver solutions. Provide Level 3 support post-implementation, resolving issues in collaboration with Application Operations and vendor support. Programming Ability: Perform and coordinate application integration activities, including designing and developing scripts and code (shell scripts, Python, Ansible playbooks, API calls, Github/Github Actions etc.).

Test, debug, document, and adjust integrations to ensure successful implementation of vendor tools into the CIBC environment. Lead & Influence: Own technical solutions; lead solution review sessions to ensure alignment with business and project requirements. Mentor and coach less senior team members, monitor production and user acceptance testing support, and troubleshoot complex problems related to applications and technologies.

CROSS-FUNCTIONAL RELATIONSHIPS: Collaborates regularly with CTPRT business analysts, Enterprise Architecture, Cyber Security , Information Security, network engineering, and security engineering teams to deliver integrated solutions. Works with Application Operations and external vendors for issue resolution, support, and successful tool deployment. Partners with project managers and other technology teams to ensure smooth delivery and implementation of security solutions.

COMPLIANCE REQUIREMENTS/RESPONSIBILITIES As an employee of CIBC, the incumbent must comply with all applicable CIBC and Line of Business policies, standards, guidelines and controls. AUTHORITIES/DECISION RIGHTS As a key contributor to the business unit, this job has the authority to recommend changes to business processes in order to enhance operational efficiency and effectiveness. JOB DIMENSIONS: Responsible for leading technical delivery of multiple concurrent security projects and integrations.

Acts as a technical SME for cybersecurity service delivery across the enterprise. Provides guidance and mentorship to less senior team members. Supports cross-functional teams and influences technical direction for information security solutions.

Rotational after-hours and weekend support is required. KNOWLEDGE AND SKILLS: Education: Bachelors degree in Computer Science, Engineering, Information Technology or related technical discipline Must have skills: 7+ years of hands-on experience in digital certificate management and PKI Strong proficiency in Linux OS, with scripting skills in Python or Shell Hands-on experience developing and maintaining Ansible playbooks and integrating API calls Practical experience with ServiceNow for change management in a corporate environment (e.g., banking) Working knowledge of DevOps toolsets including GitHub, GitHub Actions, and Artifactory Excellent communication, collaboration, and client service orientation. Values-driven, demonstrating trust, teamwork, and accountability.

Nice to have: Experience with HashiCorp, digital certificate management platforms (e.g., Venafi), and Certificate Authorities (e.g., DigiCert, Sectigo)