Staff Security Engineer – Security Engineering

This is a fully remote position, open to applicants in Canada.

📋 Description

• Act as the primary technical authority for security engineering within the Canada regulated environment.

• Design, enhance, and manage security controls across on-premises, cloud, and isolated infrastructures.

• Develop automation and infrastructure-as-code solutions to optimize security engineering, operations, reporting, and remediation processes.

• Collaborate with infrastructure, application, and platform stakeholders to facilitate remediation and monitor compliance with CIS and NIST standards.

• Provide support for security tools related to identity management, vulnerability scanning, logging, and cloud security based on team priorities.

• Create operational and executive-level reports on security posture and performance metrics.

• Engage with identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations.

⛳️ Requirements

• Must be a citizen or permanent resident of Canada.

• Must reside in Canada and conduct all work from within the country.

• Must secure and uphold Government of Canada Reliability Status.

• Background screening necessitates a verifiable history spanning five years.

• Screening will include identity verification, educational verification, criminal record examination, and credit assessment.

• A minimum of 8 years of practical experience in security or systems engineering within large-scale enterprise settings is required.

• Proficient in Linux administration and troubleshooting, covering OS internals, host networking, storage, virtualization, and containerization.

• Familiarity with DNS, NTP, and LDAP services is essential.

• Skilled in Python and Shell scripting for production-level automation and integrations.

• Experience with infrastructure-as-code and configuration management tools such as Terraform, Ansible, or Puppet.

• Proficient in CI/CD pipelines and Git-based workflows.

• In-depth knowledge of network security principles, including firewalls, segmentation, load balancers, and proxies.

• Experience in hardening systems according to CIS, STIG, or NIST standards and translating requirements into technical controls.

• Familiarity with using AI in professional work is a plus.

• Understanding of Canada Protected B classification and data residency mandates for Canadian government systems.

• Hands-on experience in at least two specialized areas: Identity and Access Management, Vulnerability Management, Public Cloud Security, Security Data Platforms, Infrastructure Security, ServiceNow Administration, or ServiceNow Security Operations.

• Preferred certifications include CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.

• Preferred experience in supporting highly regulated, isolated, or air-gapped government environments.

• A strong understanding of ITIL and ITSM processes is preferred.

• Employment is contingent upon successfully completing and maintaining the necessary screening requirements.

🏝️ Benefits

• Flexible or remote work options available.

• Employer-sponsored screening for Government of Canada Reliability Status.

• Commitment to equal opportunity employment.

• Reasonable accommodations provided during the application process.