Staff Security Engineer – Systems Engineering

This is a fully remote position, open to applicants in Canada.

📋 Description

• Act as the primary technical expert for security engineering within the Canada regulated environment.

• Design, strengthen, and manage security controls across on-premises, cloud, and isolated infrastructures.

• Develop automation and infrastructure-as-code solutions to enhance security engineering and operations, including reporting and remediation efforts.

• Collaborate with infrastructure, application, and platform stakeholders to ensure remediation efforts and compliance with CIS and NIST standards are tracked effectively.

• Provide support for security tools related to identity management, vulnerability scanning, logging, and cloud security based on the team's priorities.

• Generate operational and executive-level reports on the security posture and performance.

• Engage across various domains such as identity management, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations.

⛳️ Requirements

• Must be a Canadian citizen or a permanent resident of Canada.

• Reside in Canada and perform all job-related activities from within the country.

• Required to obtain and maintain Government of Canada Reliability Status.

• Possess five years of verifiable background history for screening purposes.

• Have over 10 years of practical experience in security or systems engineering within large-scale enterprise settings.

• Demonstrate advanced Linux administration and troubleshooting skills, covering OS internals, host networking, storage, virtualization, and containers.

• Possess proficiency in DNS, NTP, and LDAP services.

• Have proficiency in Python and Shell for production-level automation and integrations.

• Experience with infrastructure-as-code and configuration management tools such as Terraform, Ansible, or Puppet.

• Familiarity with CI/CD pipelines and Git-based workflows.

• Show expertise in network security fundamentals, including firewalls, segmentation, load balancers, and proxies.

• Experience in hardening systems according to CIS, STIG, or NIST guidelines and translating those requirements into technical controls.

• Demonstrated experience using AI in a professional capacity.

• Understanding of Canada Protected B classification and data residency requirements for systems used by the Canadian government.

• Hands-on experience in at least two specialized areas: identity and access management, vulnerability management, public cloud security, security data platforms, infrastructure security, ServiceNow administration, or ServiceNow Security Operations.

• Preferred qualifications include certifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.

• Preferred: experience in highly regulated, isolated, or air-gapped government environments.

• Strong comprehension of ITIL and ITSM processes.

• Employment is contingent upon successfully completing and maintaining necessary screening.

🏝️ Benefits

• Flexible or remote work options available.

• ServiceNow will sponsor the Government of Canada Reliability Status screening.

• Commitment to equal opportunity employment.

• Reasonable accommodations will be provided during the application process.