Infrastructure Security Engineer (Secret + Clearance)

Visa Hunt; Toronto; Hybrid; CAD 110,000 - 170,000; Full time

Benefits offered by this job

Lunch stipend

Health and dental benefits

RRSP matching/ Pension

Parental Leave top-up

Education/learning stipend

6 weeks vacation

Travel budget & offsite

Home office stipend

Job summary

Cohere is seeking an Infrastructure Security Engineer to secure and manage Protected B infrastructure, ensuring compliance with ITSG-33 and Canadian government standards. You will design security controls across cloud and hybrid environments, and lead incident response efforts for AI/ML deployments.

You should have 5+ years in infrastructure security, hands-on Kubernetes, and Terraform experience, plus familiarity with Canadian security requirements and a willingness to obtain Security

Qualifications

• 5+ years of infrastructure security experience.
• Experience with Protected B environment setup, configuration, and management.
• Knowledge of Canadian government security standards and compliance requirements.
• Hands-on Kubernetes in development and production environments.
• Experience with infrastructure as code (Terraform) and configuration management.
• Able to make informed decisions with limited data.
• Experience with AI/ML systems or LLM-based applications.
• Active Secret+ clearance or willingness to obtain clearance.

Responsibilities

• Deploy and manage infrastructure for Protected B classified environments, ensuring compliance with ITSG-33 and Canadian government standards.
• Design and implement security controls for cloud and hybrid/multi-cloud deployments (AWS, GCP, Azure).
• Evaluate, implement, and manage security tools and technologies for training cluster and inference infrastructure hardening.
• Implement security best practices including IAM, encryption, logging, and monitoring.
• Participate in security incident response activities: detection, analysis, containment, remediation.
• Conduct regular vulnerability assessments and penetration testing of infrastructure components.
• Maintain comprehensive security documentation, procedures, and configurations for classified environments.
• Maintain active Secret+ security clearance and adhere to Canadian government protocols.

Skills

Security architecture

Problem solving

Ambiguity tolerance

Secure engineering

Threat modeling

Tools

Kubernetes

Terraform

IAM

AWS

GCP

Azure

Job description

Who are we?

Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.

We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.

We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.

We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!

Security Clearance: Active Secret+ clearance strongly preferred; candidates eligible and willing to obtain clearance will also be considered.

More information about Canadian Security Clearance is available here.

As an Infrastructure Security Engineer, your key responsibilities include:

• Deploy, and manage infrastructure for Protected B classified environments, ensuring compliance with ITSG-33 and Canadian government standards

• Design and implement security controls for cloud (AWS, GCP, Azure) and hybrid/multi-cloud deployments

• Evaluate, implement, and manage security tools and technologies for training cluster and inference infrastructure hardening

• Implement security best practices including IAM, encryption, logging, and monitoring

• Participate in security incident response activities, including detection, analysis, containment, and remediation

• Conduct regular vulnerability assessments and penetration testing of infrastructure components

• Maintain comprehensive security documentation, procedures, and configurations for classified environments

• Maintain active Secret+ security clearance and adhere to all Canadian government security protocols

You may be a good fit if:

• You have 5+ years of previous experience in Infrastructure security

• Proven experience with Protected B environment setup, configuration, and management

• Knowledge of Canadian government security standards and compliance requirements

• Have hands-on experience with Kubernetes in both development and production environments

• Experience with infrastructure as code (Terraform) and configuration management

• You are comfortable with ambiguity and are able to make informed decisions with little data.

• You understand secure engineering best practices, can articulate problem statements, and propose solutions to both technically savvy and non-technical audiences.

• Experience working with AI/ML systems or LLM-based applications

Full-Time Employees at Cohere enjoy these Perks:

• A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.

• Full health and dental benefits, including a separate budget for mental health.

• RRSP matching, 401K, Pension Scheme.

• 100% Parental Leave top-up for up to 6 months, for either parent.

• Annual enrichment benefits:

  Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.

  Education & learning stipend for conferences, courses, and coaching.

• 6 weeks of paid vacation (30 working days!)

• Budget for traveling to other offices if you are remote, plus an annual company offsite.

How and Where We Work:

• Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.

• For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.

• For those not near an office: a co-working benefit so you can work alongside others in your city.

• Everyone receives a $500 home office stipend to set up your workspace properly.

If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.

We stride to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form, and we will work together to meet your needs.

We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.