Senior Staff Security Engineer – Systems Engineering

This is a fully remote position, open to applicants in Canada.

📋 Description

• Act as the leading technical authority for security engineering within the regulated environment of Canada.

• Design, strengthen, and manage security controls across on-premises, cloud, and isolated infrastructures.

• Develop automation and infrastructure-as-code to enhance security engineering and operations, including reporting and remediation efforts.

• Collaborate with infrastructure, application, and platform owners to facilitate remediation and monitor compliance with CIS and NIST standards.

• Assist with security tools related to identity, vulnerability scanning, logging, and cloud security based on team priorities.

• Generate operational and executive-level reports concerning security posture and performance.

• Set up workflows, oversee user access and data integrity, support ITSM modules, and script ServiceNow solutions where applicable.

• Engage across identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations.

⛳️ Requirements

• Must be a Canadian citizen or a permanent resident of Canada.

• Reside in Canada and conduct all work from within the country.

• Required to obtain and maintain Government of Canada Reliability Status.

• A minimum of five years of verifiable background history needed for screening.

• At least 12 years of hands-on experience in security or systems engineering within large-scale enterprise environments.

• Advanced proficiency in Linux administration and troubleshooting, covering OS internals, host networking, storage, virtualization, and containers.

• Strong knowledge of DNS, NTP, and LDAP services.

• Proficient in Python and Shell for automation and integration suitable for production.

• Experience with infrastructure-as-code and configuration management tools, such as Terraform, Ansible, or Puppet.

• Familiarity with CI/CD pipelines and Git-based workflows.

• In-depth understanding of network security fundamentals, including firewalls, segmentation, load balancers, and proxies.

• Experience in hardening systems in accordance with CIS, STIG, or NIST baselines and translating those requirements into technical controls.

• Experience utilizing AI in a professional context.

• Knowledge of Canada Protected B classification and data residency requirements for Canadian government systems.

• Practical experience in at least two specialized areas: identity and access management, vulnerability management, public cloud security, security data platforms, infrastructure security, ServiceNow administration, or ServiceNow Security Operations.

• Preferred certifications include CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.

• Experience in supporting highly regulated, isolated, or air-gapped government environments is preferred.

• Strong understanding of ITIL and ITSM processes is preferred.

🏝️ Benefits

• Flexible or remote working arrangements.

• Employer-sponsored screening for Government of Canada Reliability Status.

• Commitment to equal opportunity employment.

• Reasonable accommodations available during the application process.