Security and Identity Engineer securing enterprise AI platforms for transportation and operational technology clients. Designing identity, tenant isolation, threat modeling, and compliance-by-design foundations.
Responsibilities
Support an external software development organization as part of Inviso’s delivery team
Work closely with client product, engineering, security, and business stakeholders
Help design, secure, and deliver the foundations of an enterprise AI platform used in mission-critical transportation and operational technology environments
Apply threat modeling to architecture, engineering, and delivery decisions
Design and review tenant isolation across control plane, data plane, application, and infrastructure boundaries
Build security decisions into the platform architecture through compliance-by-design
Help client teams ship reliable, compliant, and secure platform capabilities
Raise the security bar while enabling delivery teams to move quickly and responsibly
Travel as needed due to client needs
Requirements
Experience designing and securing production software platforms, preferably in multi-tenant or regulated environments
Strong understanding of authentication, authorization, delegated access, token exchange, service identity, and least-privilege access patterns
Experience defining or contributing to platform threat models and applying them to architecture, engineering, and delivery decisions
Ability to design and review tenant isolation models across control plane, data plane, application, and infrastructure boundaries
Experience securing systems that execute untrusted content, code, tools, or agent actions
Familiarity with secure CI/CD practices including secrets management, scanning, policy enforcement, and secure release controls
Ability to support compliance-by-design practices including controls, evidence, data handling, and security documentation
Strong communication skills and ability to partner with engineers, product leaders, client stakeholders, and customer security teams
Pragmatic judgment with the ability to balance security, speed, reliability, and business value
Interest in responsible AI, secure AI systems, and controls for model, agent, and tool-based workflows
Experience designing authentication and authorization for a multi-tenant SaaS or platform environment
Deep familiarity with OAuth, OIDC, SAML, Entra ID, cloud IAM, or related identity technologies
Experience with SOC 2, ISO 27001, GDPR, or similar compliance frameworks
Experience securing AI, LLM, RAG, agentic, or tool-calling systems
Experience with enterprise-scale software, regulated delivery environments, or mission-critical systems
Experience using AI-assisted development tools while maintaining strong review and security discipline
Security Assurance Specialist supporting customer questionnaires, Trust Center content, and security documentation. Coordinating assurance work across Case IQ’s security, legal, compliance, product, and sales teams.
Penetration Testing Analyst testing Sun Life financial - services applications, APIs, mobile systems, and infrastructure. Supporting vulnerability remediation and foundational Red Team exercises.
Penetration Testing Analyst performing web, API, mobile, and infrastructure security testing at Sun Life. Supporting vulnerability remediation, reconnaissance, and foundational Red Team exercises.
Senior information security advisor securing a large organization’s networks, systems, Azure, and Microsoft 365 environments. Assessing cyber risks, controls, threats, and compliance frameworks.
Expert en stratégie numérique d’identité et sécurité chez Beneva, assureur et fournisseur de services financiers. Définit la feuille de route d’authentification, de validation d’identité et de gestion des accès.
Head of Security leading Super.com's AI - first security program and enterprise risk strategy. Building security teams, protecting financial technology products, and partnering with executives and the board.
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.