Security & Identity Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Collaborate with an external software development organization as part of Inviso’s delivery team.

• Engage closely with client product, engineering, security, and business stakeholders.

• Assist in designing, securing, and delivering the foundation of an enterprise AI platform utilized in mission-critical transportation and operational technology environments.

• Implement threat modeling in architecture, engineering, and delivery decisions.

• Design and evaluate tenant isolation across control plane, data plane, application, and infrastructure boundaries.

• Integrate security decisions into the platform architecture through compliance-by-design principles.

• Support client teams in delivering reliable, compliant, and secure platform capabilities.

• Elevate security standards while enabling delivery teams to operate swiftly and responsibly.

• Travel as required based on client needs.

⛳️ Requirements

• Demonstrated experience in designing and securing production software platforms, ideally in multi-tenant or regulated environments.

• In-depth knowledge of authentication, authorization, delegated access, token exchange, service identity, and least-privilege access patterns.

• Proven experience in defining or contributing to platform threat models and applying these to architecture, engineering, and delivery decisions.

• Capability to design and assess tenant isolation models across control plane, data plane, application, and infrastructure boundaries.

• Experience in securing systems that execute untrusted content, code, tools, or agent actions.

• Familiarity with secure CI/CD practices, including secrets management, scanning, policy enforcement, and secure release controls.

• Proficiency in supporting compliance-by-design practices, including controls, evidence, data handling, and security documentation.

• Excellent communication skills with the ability to collaborate with engineers, product leaders, client stakeholders, and customer security teams.

• Pragmatic judgment with the ability to balance security, speed, reliability, and business value.

• Interest in responsible AI, secure AI systems, and controls for model, agent, and tool-based workflows.

• Experience in designing authentication and authorization for a multi-tenant SaaS or platform environment.

• Extensive familiarity with OAuth, OIDC, SAML, Entra ID, cloud IAM, or related identity technologies.

• Knowledge of compliance frameworks such as SOC 2, ISO 27001, GDPR, or similar standards.

• Experience in securing AI, LLM, RAG, agentic, or tool-calling systems.

• Background in enterprise-scale software, regulated delivery environments, or mission-critical systems.

• Experience leveraging AI-assisted development tools while maintaining rigorous review and security discipline.

🏝️ Benefits

• Annual $2,000 training allowance.

• Paid time off.

• Paid holidays.

• Additional benefits.