Illustration of Ricky Zaman in a Maple Leafs jersey

Ricky Zaman

Engineering manager and product owner

Enterprise AI, cloud, and automation at a Top-5 Canadian bank

Based inToronto, ON. Open to senior roles
NowManaging Engineer, TD Bank Group
Experience7+ years in technology
ProgressionPromoted three times in five years
See my workDownload resume

I build enterprise AI, cloud, and automation products, and lead the team that ships them.

CurrentlyManaging Engineer at TD Bank Group, leading 9 engineers and acting as product owner for the procurement technology roadmap.
PreviouslySenior DevSecOps engineer, full stack solutions engineer, and developer across TD and TD Securities. Before the bank, Palomino Systems and the Ontario Treasury Board Secretariat.
Before thatStudied Medical Radiation Sciences at the University of Toronto, then moved into software in 2018.
StackAzure, Azure OpenAI, Azure AI Search, React, Python, C#/.NET, Terraform, Kubernetes, Splunk.

Experience

Managing Engineer (Engineering Manager)

TD Bank Group

Dec 2025 - Present

Toronto, ON

Lead a team of 9 engineers across the bank's enterprise procurement platforms, and act as product owner for the roadmap they deliver.

  • Lead a team of 9 engineers across the bank's enterprise procurement platforms, covering hiring, performance, technical direction, and quarterly roadmap
  • Serve as product owner for the bank's first Azure-based real-time procurement data pipeline, carrying it from problem framing and backlog through delivery and adoption
  • Shipped a cloud-native intake platform on React and Azure in under 2 months, retiring a legacy low-code system that had become a support burden
  • Launched conversational intake on Azure OpenAI (GPT-4) and Azure AI Search that walks requesters through a submission instead of leaving them to interpret a form
  • Closed 70+ security and audit findings across the procurement portfolio with no production disruption, and set the vulnerability triage process the team runs today
Azure OpenAIAzure AI SearchReactAzure Data Factory

Senior DevSecOps Engineer

TD Securities

Aug 2024 - Dec 2025

Toronto, ON

Owned the CI/CD backbone and the security reviews that strategic platforms had to clear before they could ship.

  • Designed the CI/CD automation that carries 300+ microservice deployments a month, replacing a release path that ran on manual steps and tribal knowledge
  • Led security architecture reviews and risk assessments for 3 strategic banking platforms, including the firm's Generative AI Sandbox, and cleared each through OSFI and enterprise security requirements
  • Owned the rebuild of TD Gigs, an internal talent marketplace, from Angular to React with a migration to GCP, resolving the governance findings that had stalled further investment
Azure DevOpsGCPReactOSFISAST/DAST

Full Stack Solutions Engineer

TD Securities

Jul 2022 - Aug 2024

Toronto, ON

Automated the manual work out of enterprise security operations and moved the platform off legacy infrastructure.

  • Cut 8,600+ hours of annual manual effort by automating enterprise security processes that several teams had been running by hand
  • Architected the move off legacy infrastructure to VMware Cloud (VMC2), delivering an active-active platform with high availability and disaster recovery 8 months ahead of schedule while the user base grew 50%
  • Built 20+ Splunk dashboards now used by every payments application team, which moved the group from reacting to incidents to catching them early
  • Delivered 5 unattended UiPath automations that took manual, error-prone steps out of daily operations
VMware CloudSplunkUiPathPowerShell

Associate Software Developer

TD

Jun 2020 - Jul 2022

Toronto, ON

Built customer and internal products across web and mobile under banking security and privacy requirements.

  • Built the Early Talent Portal in TD Gigs (Angular, Node.js) to match associates to rotations, replacing a document-driven process and cutting matching time 50% while improving placement accuracy 20%
  • Engineered mobile payments applications in React and Android from design through testing and production release, under banking security and privacy requirements
  • Ran daily Blue Prism deployments for high-stakes automated processes and reduced deployment-related incidents 30%
AngularNode.jsReactAndroidBlue Prism

Full Stack Developer

Palomino Systems Inc.

Apr 2019 - Sep 2019

Toronto, ON

Delivered client web applications end to end, from requirements through production.

  • Delivered web applications end to end for 5 clients, from requirements through production, building custom features on Laravel
  • Grew organic traffic 30% across client sites through SEO fixes and front-end performance work
  • Reworked database schemas and Eloquent queries, then load tested hosting infrastructure so applications stayed responsive as traffic grew
LaravelPHPMySQLSEO

Software Developer and QA Analyst

Ontario Treasury Board Secretariat

Aug 2018 - Feb 2019

Oshawa, ON

Built and tested government data-interchange systems, and introduced the QA practice around their releases.

  • Built and maintained components of a government Electronic Data Interchange application in .NET, covering design, development, and deployment of the features that moved data between systems
  • Built an ASP.NET MVC application that tracked and reported file transmission errors, replacing manual error triage
  • Introduced QA and release-testing practices that streamlined weekly CRM deployments, and ran defect logging and test-case distribution through SharePoint
.NETASP.NET MVCSQLSharePoint

Selected work

Macro photograph of a circuit board

Generative AI

Conversational procurement intake

Problem
Requesters had to interpret a long procurement form on their own. Submissions came in incomplete, and procurement staff spent their time chasing corrections instead of sourcing.
My role
Product owner and engineering manager. I framed the problem, owned the backlog, and led the team that built it.
What I built
Conversational intake on Azure OpenAI (GPT-4) and Azure AI Search that walks a requester through a submission and asks for what is missing, rather than leaving them to decode a form.
Outcome
  • In production in under 2 months
  • Better submission quality and less rework for procurement staff
Azure OpenAI (GPT-4)Azure AI SearchRAGAzure
Analytics dashboard on a screen

Data platform

Real-time procurement data platform

Problem
Procurement reporting was assembled by hand. By the time a number reached finance or sourcing it was already stale, so decisions were made against last month's picture.
My role
Product owner for the bank's first Azure-based real-time procurement data pipeline, from problem framing and backlog through delivery and adoption.
What I built
An Azure data pipeline that replaced manual legacy reporting with numbers finance and sourcing can act on the same day.
Outcome
  • First Azure-based real-time procurement data platform at the bank
  • Replaced a manual legacy reporting process
Azure Data FactoryAzure SQLAzurePower BI
Server racks in a data centre

Cloud modernization

Legacy to VMware Cloud migration

Problem
The platform ran on legacy infrastructure that could not offer real high availability or disaster recovery, while its user base kept growing.
My role
Architected the migration and drove it through delivery.
What I built
A move to VMware Cloud (VMC2) as an active-active platform with high availability and disaster recovery built in.
Outcome
  • Delivered 8 months ahead of schedule
  • Absorbed 50% user growth on the new platform
VMware Cloud (VMC2)Active-activeHA/DR
Padlock resting on a backlit keyboard

DevSecOps

CI/CD and security automation

Problem
Releases depended on manual steps and tribal knowledge, and enterprise security processes were being run by hand across several teams.
My role
Designed the automation and led the security architecture reviews.
What I built
CI/CD automation that carries the deployment path end to end, plus automation of the enterprise security processes around it.
Outcome
  • 300+ microservice deployments a month
  • 8,600+ hours of annual manual effort removed
  • 70+ security and audit findings closed with no production disruption
Azure DevOpsJenkinsSplunkSAST/DAST

Skills

Product and delivery

Product ownershipDiscoveryRoadmap planningBacklog managementUser stories and acceptance criteriaPrioritization (RICE, MoSCoW)OKRs and KPI definitionAgile/ScrumKanbanStakeholder managementVendor managementJiraConfluenceAzure DevOps Boards

AI and generative AI

Azure OpenAI (GPT-4)Azure AI SearchRetrieval-augmented generationEmbeddings and vector searchPrompt engineeringConversational AI designAI governance and responsible AIGitHub Copilot

Cloud and data

Azure (Data Factory, Functions, App Service, SQL, DevOps)GCPTerraformDockerKubernetesVMware Cloud (VMC2)Azure SQLMongoDBMySQL

Engineering

PythonC#/.NETTypeScriptJavaScriptReactAngularNode.jsSQLPowerShellREST APIsMicroservices

DevSecOps and observability

GitHub ActionsJenkinsTeamCityNexusSplunk (ITSI)GrafanaPrometheusOWASPSAST/DASTVulnerability managementAudit and OSFI remediation

Certifications

Microsoft Certified
Azure AI Fundamentals (AI-900), Azure Data Fundamentals (DP-900), Azure Fundamentals (AZ-900)
Oracle Cloud Infrastructure
Generative AI Professional, AI Foundations Associate

Education

York University
Certificate in DevOps, 2025
Seneca Polytechnic
Advanced Diploma, Computer Programming and Analysis, 2020
University of Toronto
BSc, Medical Radiation Sciences, 2016
York University
BSc (Honours), Biomedical Science, 2014