Cybersecurity Operations Engineer

Hydro Ottawa; Ottawa; On-site; CAD 89,000 - 134,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Hydro Ottawa is seeking a Cybersecurity Operations Engineer in Ottawa, ON to design, automate, and secure our cybersecurity infrastructure. You will build automated playbooks, integrate systems, and ensure compliance with security standards while supporting incident response and day‑to‑day operations.

The role requires scripting in Python, PowerShell, and Bash, plus experience with IAM, SIEM, and cloud integrations.

Qualifications

• Undergraduate engineering degree required and PE licensure or ability to obtain in Ontario.
• One or a combination of CEH/OCSP/CISA/CISM/CISSP or GIAC certifications desired.
• Strong scripting skills in Python/PowerShell and experience with cloud security recommended.

Responsibilities

• Architect and implement automated security workflows and playbooks.
• Investigate confidential security incidents and preserve forensic data as needed.
• Monitor and analyze security events, enforce security baselines, and ensure regulatory compliance.
• Develop integrations between software, cloud environments, and core IT infrastructure.
• Maintain IAM configurations, SSO, and identity governance across enterprise systems.

Skills

Python scripting

PowerShell scripting

Incident response

Cloud security concepts

English communication

Education

Bachelor's degree in Engineering

Professional Engineer (Ontario)

Certifications CEH/OCSP/CISA/CISM/CISSP/GIAC

Tools

Google Workspace

Microsoft tools

SIEM tooling

Job description

At Hydro Ottawa, we empower the lives of the people in the communities we serve. We help to power your professional growth at every step of your engineering career. For those starting out, we provide the training and skills needed to achieve your P.Eng. designation, and for established engineers, our structured framework offers a clear, transparent pathways to intermediate and senior levels. Wherever you are in your career, there’s a path for growth ahead of you here. As the electricity distributor to the Nation’s Capital, our work powers the essential activities that make up our lives - at home, at work and at play. And as Ontario’s largest municipally-owned producer of green power, we are leading the way to a greener tomorrow.

JOB SUMMARY

The Cybersecurity Operations Engineer is responsible for the programmatic design, automation, and architectural integrity of Hydro Ottawa’s cybersecurity infrastructure. Working within the Cybersecurity team to protect the organization’s critical infrastructure and assets, this role leverages an engineering framework to design baseline system configurations, build automated integration pipelines, and orchestrate workflows to proactively prevent, detect, and manage cyber threats across corporate applications, identity systems, and infrastructure platforms. Under the guidance of the Supervisor, Cybersecurity, the Cybersecurity Operations Engineer acts as the primary technical asset for cybersecurity systems architecture, incident response, automation activities, authentication policies, enterprise application interfacing, and day‑to‑day user support operations. The Cybersecurity Operations Engineer is responsible for evaluating, scripting, and supporting the development of all new system integrations, ticketing workflows, and related business processes to ensure advanced security controls, compliance baselines, and identity architectures are strictly incorporated across the corporate environment. Additionally, the role serves as a core technical resource for confidential internal security investigations, regularly isolating and preserving digital forensic evidence relating to employee policy violations, data exfiltration, or labour relations breaches.

MAJOR RESPONSIBILITIES

• Programmatically orchestrate, analyze and respond to security alerts by designing, identifying root causes and contributing factors, testing, and engineering automated playbooks to continuously harden infrastructure against future events and eliminate manual workflows.
• Conduct confidential internal security investigations into potential policy violations, unauthorized access, and data exfiltration by personnel.
• Regularly collect, analyze, and preserve digital forensic evidence required by Management for employee disciplinary actions, grievances, or formal labour relations proceedings.
• Monitor internal employee system logs and network activities on a confidential basis to identify and report scrutiny irregularities or compliance breaches directly to Management.
• Proactively monitor and analyze actionable threat intelligence from industry feeds and open‑source intelligence (OSINT) to programmatically update detection rules, SIEM watchlists, and automated playbooks against emerging cyber threats.
• Conduct exposure management across corporate systems to detect vulnerabilities, prioritize risk mitigation efforts, and guide other IT teams on architectural remediation.
• Ensure strict alignment with corporate security frameworks through continuous validation of compliance baselines across internal endpoints, host infrastructure, and directory access permissions.
• Address, respond to, and resolve incoming tickets within the corporate ticketing system, serving as a primary point of contact for security operations.
• Provide advanced technical support and engineering guidance to internal units, resolving complex authentication blocks, systemic vulnerabilities, and integration constraints.
• Act as the engineering liaison to the CSaaS Security Operations Center (SOC) to investigate security detections, manage data sources, and troubleshoot device connectivity.
• Engineer, maintain, and secure core network trust infrastructure, by deploying automated solutions to manage trust certificates for internal resources (e.g., workstations, servers, websites).
• Develop, write, and maintain custom scripts (e.g., PowerShell, Python, Bash) to automate repetitive security tasks, streamline log analysis, and optimize operational pipelines.
• Architect, test, and implement secure integrations between new software applications, cloud environments, and existing core IT infrastructure.
• Build, program, and maintain API integrations and automated pipelines to sync security tooling, directory services, and cloud platforms (e.g., Google Cloud, IBM).
• Perform formal security compliance and architectural reviews on new system integrations, certifying that deployment configurations strictly follow secure designs and corporate frameworks.
• Audit and review onboarded software assets and emerging tools to certify that all enterprise deployment pipelines align with established corporate policies and cybersecurity requirements.
• Manage endpoint configuration and user policies by enforcing centralized and automated registry‑level enforcement baselines.
• Program and scale Identity and Access Management (IAM) environments, specifically configuring complex authentication policies, single sign‑on (SSO), and automated identity governance.
• Deploy, monitor, and maintain IdP authentication policies across the enterprise, managing user access and application‑specific access rules.
• Create analysis workflows and associated business processes to ensure cybersecurity needs and architectural designs are successfully incorporated in the practices and solutions of other corporate Divisions.
• Participate in the technical development, planning and execution of new cybersecurity initiatives.
• Perform other related duties as required.

EDUCATION AND EXPERIENCE

• Undergraduate degree in Engineering from an accredited university
• Professional Engineer, licensed or able to be licensed in the province of Ontario
• Completion of—or the ability to obtain within two years—one or a combination of the following designations: CEH, OCSP, CISA, CISM, CISSP or GIAC certifications (i.e. GCIH, GPEN, etc.)
• Experience in an electric utility engineering environment considered an asset
• Experience in cloud security is considered an asset
• Proficiency in scripting languages such as Python, Powershell considered an asset
• Strong computer skills; proficient in the use of office productivity and collaboration tools, preferably Google Workspace, as well as different Microsoft tools
• English essential, both oral and written; Bilingual (English/French) considered an asset

This is a management group opportunity and salary will be commensurate with qualifications.

Hydro Ottawa offers a Hybrid Work Model. Hybrid work is position specific, details of the hybrid model will be discussed with successful candidates.

Hydro Ottawa may use artificial intelligence ("AI") during the recruitment process to aid in the screening and selection of candidates.

Location: Ottawa, ON

The annual salary range for this position identified below depends on experience, education, and professional designation. The successful candidate will be offered a salary within this range based on their qualifications.

Pay Range Minimum: $89,420.99

Pay Range Maximum: $134,130.81

Posting End Date (if applicable): September 13, 2026

Hydro Ottawa is committed to establishing a qualified workforce that reflects the diverse population it serves and we encourage applications from all qualified individuals. We are also committed to preventing and removing barriers to employment for people with disabilities, and we invite you to inform us should you have any accessibility or accommodation needs.

Applicants must be legally entitled to work in Canada.

Why choose a career at Hydro Ottawa Group?

Our creative, innovative and forward‑thinking employees are blazing the trail to a better tomorrow as we work towards our ambitious goal of achieving net‑zero operations by 2030. Hydro Ottawa Group is committed to employing a diverse workforce that better reflects the communities we serve; we want our employees to be their true selves. We are recognized year over year as a National Capital Region Top Employer, one of Canada’s Greenest Employers, and one of Canada’s Top Employers for Young People.