DevOps and Security Engineer

Martello Technologies; Ottawa; Hybrid; CAD 100,000 - 140,000; Full time

Job summary

Martello Technologies in Ottawa is seeking a hands-on DevOps & Security Engineer to own CI/CD pipelines, cloud security, and compliance evidence for our Vantage DX and MPA platforms. This is a hybrid role where you’ll implement IaC, automate testing, and drive vulnerability remediation across AWS and Azure.

You will lead monitoring, incident response, and security controls, manage AI coding tool safeguards, and report on deployment metrics.

Qualifications

• 5+ years in DevOps, site reliability, or platform engineering.
• Hands-on CI/CD with GitHub Actions, containers, and Terraform IaC.
• Production hosting and security on AWS; IAM, CloudFront, ALB, S3, SSM; nginx; Kubernetes.
• Vulnerability management: scanning and remediation with Trivy, Dependabot; risk-based prioritization.
• Network security fundamentals: segmentation, firewalls, TLS, VPN, least-privilege access.
• Monitoring, on-call, incident response and RCA.
• Scripting in Python, Bash, or PowerShell.
• Exposure to CRA, SOC 2, ISO 27001.

Responsibilities

• Own CI/CD pipelines, build infrastructure, and release automation for cloud and on-prem.
• Maintain infrastructure as code; keep dev and production aligned.
• Make releases repeatable, auditable, fast; improve build, test automation, deployment.
• Implement automated security and quality gates on PRs; AI-assisted review.
• Scale automated UI and regression testing (Playwright).
• Implement controls for AI coding tools, secrets scanning, license checks, audit logging.
• Report delivery-flow metrics: PR size, time to review, test cycle time, defects.
• Run monitoring, alerting, incident response for production.
• Lead root cause analysis after customer-impact events.
• Track deployment freq, change failure rate, MTTR.
• Secure cloud hosting with AWS/Azure; IAM, secrets; WAF, TLS, backups, hardening.
• Identity and access management: Keycloak SSO, OAuth/OIDC, JWT.
• Secrets handling, least privilege, safe data processing.
• Monitor services with OpenTelemetry; track usage and cost.
• Review network security configuration; fix drift.
• Operate Kubernetes, Terraform, Docker, cloud-init, nginx, scheduled jobs.
• Experience with LLM or AI agent workloads; AWS Bedrock, AgentCore, cost monitoring.
• Vulnerability lifecycle across code, dependencies, containers; remediation timelines.
• Provide compliance evidence for CRA reporting and customer security questionnaires.
• Serve on incident response team and 24-hour on-call rotation.

Skills

DevOps

Site reliability

Platform engineering

Incident response

Python Bash PowerShell

Tools

GitHub Actions

Terraform

Kubernetes

Docker

OpenTelemetry

Trivy

Dependabot

Keycloak

OAuth/OIDC

JWT handling

Job description

As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments.

This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.

This is an Ottawa based hybrid role and you must reside in Ottawa at the time of hire.

Key Responsibilities

Build, test automation, release, and deployment

• Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery
• Maintain infrastructure as code & keep dev & production environments consistent
• Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs
• Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review
• Help teams scale automated UI and regression testing (e.g. Playwright), so testing capacity grows with output.
• Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging
• Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects

Production monitoring and reliability

• Run monitoring, alerting, & incident response for production services
• Lead root cause analysis & lessons learned after customer-impacting events
• Track & improve deployment frequency, change failure rate, & mean time to recovery

Hosting and network security

• Secure cloud hosting, with AWS and Azure including
• identity and access, secrets
• and WAF rules, TLS, backups, and hardening
• Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling
• Secrets handling, least-privilege access, safe processing of data
• Monitor services with OpenTelemetry, & track usage and cost
• Review network security configuration on a regular schedule & fix drift
• Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docker, & cloud-init deployments, nginx, & scheduled jobs
• Experience operating LLM or AI agent workloads, AWS Bedrock,
• AgentCore, cost monitoring & guardrails
• Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate
• Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
• Serve on the incident response team & the 24-hour on-call rotation

Required Qualifications

• 5+ years in DevOps, site reliability, or platform engineering
• Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software
• Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM, nginx, kubernetes)
• Working knowledge of vulnerability management: code, dependency, and container scanning (e.g.,
• Trivy, Dependabot), triage, and remediation, including risk-based prioritization (e.g. severity scoring combined with exploitability data)
• Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN, least-privilege access
• Production monitoring, on-call, incident response, and root cause analysis experience
• Scripting and automation in Python, Bash, or PowerShell
• Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001

About Martello

We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.

Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.