Senior DevSecOps & Cloud Security Engineer (PL7326)

Role overview

Security and delivery responsibilities

• Design and implement infrastructure as code, environment provisioning, and secure CI/CD pipelines.
• Integrate code, dependency, container, infrastructure, and secrets scanning into delivery workflows.
• Implement identity, service-account, least-privilege, segregation-of-duties, and privileged-access controls.
• Configure secure networking, encryption, key and secrets management, logging, monitoring, alerting, and audit evidence.
• Define vulnerability, patching, remediation, and penetration-testing support processes.

Resilience and production operations

• Automate backup, restore, resilience, disaster recovery, and recovery tests against approved RTO/RPO objectives.
• Support privacy, data-residency, retention, data-lifecycle, and secure-destruction controls.
• Create operational dashboards, SLOs and alerts, incident runbooks, and production-readiness evidence.
• Partner with cyber, privacy, architecture, risk, and audit stakeholders; support releases, cutover, hypercare, incident response, and root-cause analysis.

Required experience

• At least 7 years in DevOps, platform engineering, cloud security, or site reliability engineering.
• Strong AWS and/or Azure experience, including infrastructure as code, networking, IAM, logging, monitoring, and security services.
• Hands-on CI/CD experience with automated testing and security gates.
• Working knowledge of vulnerability management, secure SDLC, incident response, penetration testing, backup, and disaster recovery.
• Experience with containers or serverless and modern observability practices.
• Ability to produce audit-ready evidence and work effectively with enterprise control functions.

Preferred experience

• Banking or financial-services experience supporting sensitive workloads is preferred; regulated-industry experience is accepted.
• Cloud security or DevOps certification is preferred.
• Preferred experience includes SOC 2-aligned controls, NIST or ISO frameworks, and financial-institution security reviews.
• Preferred experience includes securing AI/model services, RPA workers, enterprise integrations, and Canadian privacy or data-residency considerations.

Illustrative measures

Core values