Senior Staff Security Engineer – Systems Engineering

This is a fully remote position, open to applicants in Canada.

📋 Description

• Act as the principal technical expert for security engineering within the Canadian regulated environment.

• Design, enhance, and manage security controls across on-premises, cloud, and isolated infrastructures.

• Develop automation and infrastructure-as-code to optimize security engineering and operations, reporting, and remediation processes.

• Collaborate with infrastructure, application, and platform stakeholders to facilitate remediation efforts and monitor compliance with CIS and NIST standards.

• Provide support for security tools related to identity, vulnerability scanning, logging, and cloud security in alignment with team priorities.

• Generate operational and executive-level reports on security posture and performance metrics.

• Assist various security engineering functions across identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations.

⛳️ Requirements

• Must be a Canadian citizen or a permanent resident of Canada.

• Reside in Canada and conduct all work from within the country.

• Achieve and uphold the Government of Canada Reliability Status.

• Background screening entails five years of verifiable history, identity confirmation, education validation, a criminal record check, and a credit assessment.

• Over 10 years of practical experience in security or systems engineering within large-scale enterprise environments.

• Advanced proficiency in Linux administration and troubleshooting, covering OS internals, host networking, storage, virtualization, and containerization.

• Strong knowledge of DNS, NTP, and LDAP services.

• Skilled in Python and Shell for creating production-level automation and integrations.

• Experience with infrastructure-as-code and configuration management tools like Terraform, Ansible, or Puppet.

• Familiarity with CI/CD pipelines and Git-based workflows.

• In-depth understanding of network security principles, including firewalls, segmentation, load balancers, and proxies.

• Proven experience in hardening systems in accordance with CIS, STIG, or NIST standards and converting requirements into technical controls.

• Practical experience utilizing AI in professional tasks.

• Knowledge of Canada’s Protected B classification and data residency requirements for government systems.

• Hands-on expertise in at least two specialized areas: identity and access management; vulnerability management; public cloud security; security data platforms; infrastructure security; ServiceNow administration; ServiceNow Security Operations.

• Preferred qualifications include certifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or GCP security certification.

• Preferred experience in supporting highly regulated, isolated, or air-gapped government environments.

• Preferred strong understanding of ITIL and ITSM processes.

• Employment is contingent upon successfully completing and maintaining the necessary screening requirements.

🏝️ Benefits

• Equity (when applicable).

• Variable/incentive compensation.

• Health plans.

• Flexible spending accounts.

• Employee Stock Purchase Plan (ESPP).

• Matching donations.

• Flexible time away plan.

• Family leave programs.