Endpoint Deployment Engineer – Microsoft Intune / SCCM

astra north infoteck; Brampton; Sur place; CAD 120 000 - 160 000; Plein temps

Résumé du poste

Charger logistics Inc. is seeking a Senior AI Platform Security Engineer to join our Brampton office and own the platform our AI agents run on. You will secure and operate Gemini Enterprise Platform, ensure IAM discipline, and design zero-trust access for cloud agents reaching internal systems.

Responsibilities include building agent infrastructure, observability with Datadog, and ensuring security reviews before launch, while collaborating with IAM on identity across systems.

Qualifications

• 5+ years in cloud platform, DevOps/SRE or cloud security with strong GCP depth.
• Solid GCP IAM fundamentals and tooling experience.
• Hands-on with Vertex AI / Gemini Enterprise or depth with LLM apps and agent frameworks.
• Zero-trust networking and threat modeling on Linux.
• Production observability with Datadog and OpenTelemetry.
• Terraform and Python proficiency.

Responsabilités

• Build and operate agent infrastructure on Gemini Enterprise Platform.
• Own security architecture for agents in GCP, including IAM and network paths.
• Design zero-trust access, using Cloudflare Tunnel or Tailscale.
• Oversee observability with Datadog and OpenTelemetry.
• Ensure pre-production security reviews and incident containment.

Connaissances

GCP depth

Zero-trust networking

Python

Terraform

Datadog

OpenTelemetry

LLM infra knowledge

Security architecture

Decision making

Formation

Professional Cloud Security Engineer

Professional Cloud Architect

Outils

Vertex AI / Gemini Enterprise

Okta

Entra ID

Cloudflare Tunnel

Tailscale

LangChain / LangGraph

Description du poste

Charger logistics Inc. is a world- class asset-based carrier with locations across North America. With over 20 years of experience providing the best logistics solutions, Charger logistics has transformed into a world-class transport provider and continue to grow.

We are looking for a highly motivated Senior AI Platform Security Engineer to join our team based out of our Brampton office and own the platform our AI agents run on. We're standardizing on Google's Gemini Enterprise Agent Platform (formerly Vertex AI) for agents in GCP, with Datadog for observability and zero-trust networking connecting cloud agents to internal systems. You'll build, secure and operate this stack: agent identity and governance in GCP, the network paths that let agents reach our private systems safely, and the monitoring that shows what every agent is doing and what it costs.

Responsibilities:

• Build and operate our agent infrastructure on Gemini Enterprise Agent Platform, including Agent Engine, Agent Gateway, Agent Registry, Agent Identity and Model Armor.
• Own the security architecture for agents in GCP:
• a unique identity for every agent
• least-privilege IAM
• all tool calls routed through Agent Gateway
• Model Armor protection against prompt injection and data leakage
• registration before production
• Design and run zero-trust access for cloud agents reaching internal systems, using Cloudflare Tunnel or Tailscale, narrowly scoped service publishing, and approved-destination lists for outbound traffic.
• Own agent observability in Datadog: end-to-end tracing, token and cost monitoring, latency and drift alerts, with OpenTelemetry as the standard.
• Enable pre-production testing and evaluation of agents, and require security review before launch.
• Maintain audit logging and contain agent security incidents, working with our IAM team on credential revocation.
• Build the paved road (templates, standards and guardrails) so teams can ship agents quickly and safely, and support the teams building them.
• Work with our IAM team on identity across GCP, Okta and Entra ID.

Requirements

• 5+ years in cloud platform, DevOps/SRE or cloud security engineering, with strong GCP depth. A Professional Cloud Security Engineer or Professional Cloud Architect certification is a plus.
• Solid GCP IAM fundamentals: service accounts, workload identity, org policy and VPC Service Controls.
• Hands-on experience with Vertex AI / Gemini Enterprise Agent Platform, or real depth with LLM applications and agent frameworks (ADK, LangChain, LangGraph or similar).
• Zero-trust networking and threat modeling experience (Cloudflare, Tailscale, Zscaler or equivalent) on Linux.
• Production observability experience (Datadog preferred) and working knowledge of OpenTelemetry.
• Terraform and strong Python.
• The judgment and confidence to say no. You're the control point between fast-moving AI experiments and production.

Nice to Have

• LLM observability or evaluation tooling (Datadog LLM Observability, Langfuse, Arize or similar).
• Policy-as-code (OPA or GCP org policy constraints) or secrets management (Secret Manager, Vault).
• Integration with Okta or Entra ID.
• Experience in logistics, transportation, supply chain or another high-volume, 24/7 operations environment.