DevSecOps Engineer at Planitar leading the integration of security into software development and cloud environments. Focused on automating security processes and collaborating with engineering teams.
Responsibilities
Secure CI/CD Pipelines: Design, build, and maintain automated security testing within continuous integration and deployment pipelines (incorporating SAST, DAST, and SCA tools).
Cloud Security Posture: Implement and monitor security controls across our AWS cloud environment, ensuring compliance with industry best practices and frameworks.
Infrastructure as Code (IaC) Security: Enforce "Security as Code" by implementing automated scanning for Terraform templates to catch misconfigurations before deployment.
Vulnerability Management: Triage, track, and partner with engineering teams to remediate security vulnerabilities across infrastructure, containers, and applications.
Threat Modeling & Architecture: Participate in system design reviews and threat modeling sessions to identify potential attack vectors in new features and infrastructure.
Incident Response: Assist in cloud and application security incident response, including forensic log analysis and mitigation strategy development.
Advocacy & Training: Evangelize secure coding practices and provide guidance to developers on how to build highly secure, resilient systems.
Requirements
3+ years of hands-on experience in DevSecOps, Cloud Security, or a DevOps role with a heavy security focus.
Strong proficiency in securing AWS environments (e.g., deep knowledge of IAM, VPCs, GuardDuty, Security Hub, AWS WAF, KMS).
Strong coding/scripting skills in Python, Bash to automate security workflows and integrate APIs.
Hands-on experience integrating security scanners (e.g., Snyk, SonarQube, Trivy, Checkmarx) into modern pipelines (e.g., GitHub Actions, GitLab CI).
Proficiency writing and reviewing IaC (Terraform) and utilizing IaC security scanners (e.g., tfsec, Checkov).
Solid understanding of Docker and Kubernetes security concepts, including image scanning, RBAC, and network policies.
Practical knowledge of network security fundamentals, including firewalls, zero-trust architecture, VPNs, and TLS/SSL.
Relevant certifications such as AWS Certified Security – Specialty, CKA/CKS (Certified Kubernetes Security Specialist), or OSCP are a plus.
Experience with regulatory compliance frameworks (e.g., SOC2, ISO 27001, HIPAA) is a plus.
Familiarity with SIEM/SOAR tools and centralized logging strategies.
Senior Developer Operations contributing to scalable software solutions at a local tech company in Toronto. Building cloud infrastructure and optimizing platform services with a focus on reliability.
DevOps Engineer contract role in Toronto. Work on Oracle financial applications, drive automation, and support critical financial reporting cycles in a hybrid environment.
Reliability Engineering Specialist utilizing reliability tools and models to improve asset performance at Enbridge. Collaborating across teams to guide investment decisions for safe operations.
Engineer responsible for the deployment and operational infrastructure of Multigres, a distributed Postgres platform. Building and maintaining the Multigres Operator on Kubernetes while collaborating across teams.
Lead Site Reliability Engineer ensuring scalable, resilient services for Movable Ink at high volume content platform. Design and drive automation strategies while mentoring engineering teams.
DevOps Engineer responsible for infrastructure, CI/CD, and backend services for a major university platform. Join Robots and Pencils, building impactful digital solutions.
DevOps Specialist ensuring efficient DevOps practices within Development and QA teams at Desjardins. Collaborating with developers to optimize IT platforms and enhance deployment strategies.
Cloud/DevOps Intern developing tools for enterprise technology at TD. Working on DevOps processes and gaining hands - on experience in cloud technologies in a hybrid model.