Desjardins property technician supporting fire prevention, building safety, management, and build - out projects. Providing technical support, process coordination, user training, and operational guidance.
About the role
- Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Responsibilities
- Design, implement and maintain cloud security solutions to protect cloud-based systems and applications
- Implement and maintain robust security controls for cloud infrastructure and applications
- Discover, remediate and validate security issues across the cloud infrastructure
- Conduct architecture and design reviews from a security perspective and provide actionable requirements and recommendations
- Collaborate with security leadership, compliance and engineering teams to execute security strategies
- Build, deploy and manage security tools such as WAF, IDS/IPS, workload protection, GCP Security Command Center and Azure Security Center
- Propose and contribute to security and compliance improvements for CI/CD pipelines and deployment processes
- Automate infrastructure provisioning and deployment with IaC tools like Terraform or Pulumi
- Design and operate scalable processes for provisioning cloud access and upholding the principle of least privilege
- Participate in detection and incident response processes by improving observability and alerting
- Support first-party security audits and questionnaires
- Lead and oversee security assessments and threat-modeling exercises
- Implement security controls within Kubernetes
- Build DevSecOps tools and integrations
- Self-organize and prioritize activities autonomously
Requirements
- 5+ years of experience on an infrastructure- and/or security-focused team
- 5+ years of development experience, ideally with Go (GoLang) and TypeScript/JavaScript
- Knowledge of common web application vulnerabilities and the OWASP Top 10 framework
- Ability to analyze and act on results from DAST and SAST tools, including Tenable and Snyk
- Strong grasp of DevSecOps principles and familiarity with CI/CD pipelines, including GitHub Actions, Argo CD and Azure DevOps
- Experience deploying and customizing security tools: vulnerability scanners, static analyzers, WAF, IDS/IPS and endpoint security monitoring
- Deep understanding of cloud and network security, including Kubernetes
- Experience with GCP and one or more services such as Security Command Center, GKE, Cloud IDS, Cloud Armor and Secrets Manager
- Experience with Azure and one or more services such as Security Center, Azure PaaS App Services, VMs, Azure SQL, Front Door and Key Vault
- Experience writing infrastructure-as-code with Terraform, Pulumi and Helm
- Familiarity with security frameworks and benchmarks such as CIS, NIST and MITRE ATT&CK
- Understanding of IAM principles and cloud-native IAM solutions
- Passion for continuous learning and knowledge sharing
- Bilingual (English and French)
Benefits
- Employee mortgage program: exclusive preferred rates
- Comprehensive health coverage: top-tier extended coverage (health, dental, vision) with 100% drug coverage
- Access to a group retirement savings plan (RRSP/RPP) with competitive employer matching contributions
- Telemedicine and family support (top-up programs for maternity/parental leave)
- Flexible workplace: fully remote or at one of our offices (Montréal, Québec City, Toronto, etc.)
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff Security Engineer securing Shakepay’s bitcoin financial - services platform and customer data. Advancing AI - driven security, observability, threat modeling, and incident response for Canadian users.
Ingénieur sécurité principal protégeant l'infrastructure, les produits et les données de Shakepay, plateforme canadienne de services financiers bitcoin. Automatisation, IA, détection et réponse aux incidents.
Senior Application Security Researcher advancing AI - driven application security from prompt to production. Building detection systems and autonomous agentic penetration - testing capabilities.
Senior UX designer supporting PwC Canada’s customer transformation engagements. Designing Salesforce Experience Cloud portals, journeys, prototypes, and accessible digital experiences.
Regional Health & Safety Manager leading health, safety, and regulatory compliance for GFL’s environmental services operations in Quebec. Conducting audits, incident management, training oversight, and regional site visits.
Information Security Student supporting vulnerability management and cloud security at Nasdaq Verafin. Assisting with remediation, security posture enforcement, and cloud environment protection.
Senior Principal Security Architect shaping enterprise security architecture for Invesco, a global investment - management firm. Leading cloud, identity, network, data - protection, and risk initiatives.
Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.