Lead Cloud DevSec Ops Engineer

Highbrow LLC; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

A technology company in Ontario, Canada is seeking a Lead Cloud DevSec Ops Engineer to ensure cloud solutions comply with security standards. Key responsibilities include implementing cloud capabilities, developing APIs, and integrating security tools. Ideal candidates will have over 7 years of experience in IT and DevOps, with strong programming skills in Python and expertise in container security. This position offers a dynamic environment and the opportunity to work with advanced cloud technologies.

Qualifications

• 7+ years of automation and IT experience.
• Experience in DevOps and cloud roles for 2+ years.
• Strong programming skills in Python, PowerShell, and Rego.

Responsibilities

• Ensure cloud solutions meet security and compliance controls.
• Implement enterprise cloud capabilities for automation.
• Develop APIs and Webhook integrations.

Skills

Automation and IT experience

DevOps experience

Programming with Python

Webhook development

Knowledge of container security

Tools

Terraform

GitHub Actions

AquaSec

Wiz.io

Google Chronicle

Splunk

Job description

Job Title: Lead Cloud DevSec Ops Engineer

Key Technology: DevOps, Python, PowerShell, Rego, Azure, GCP

Job Responsibilities:

• Ensure that all cloud solutions follow internally defined security and compliance controls.
• Implement the enterprise cloud capability and enhance the cloud orchestration platform for automated provisioning, management and scalability of hosts, containers, applications, and cloud services (AquaSec, Wiz.io, Defender, Sentinel, Google Chronicle, Splunk, etc.).
• Develop APIs and Webhook for multi-directional integration of cloud orchestration platform with system management systems, DevOps tools, and cloud platforms.
• Data transformation and reporting for security compliance KPI/ KRIs.
• Integration of security tooling in enterprise deployment pipelines for developer feedback and runtime governance.
• Integration of security reporting with SIEM and incorporation with enterprise monitoring procedures.
• Participate in fast‑paced DevOps engineering teams within Scrum agile processes.

Skills and Experience Required:

• 7+ years of automation and IT experience. 2+ years in DevOps and cloud experience.
• Experience with Google Org Policy.
• Strong programming skill with experience in API and Webhook development using Python, PowerShell, and Rego.
• Experience with automating and integrating serverless PaaS solutions in Azure and GCP platforms.
• Deep knowledge of container security and orchestration. Experience with compliance and application security tools.
• Understand cloud (Azure/GCP) security features (data protection, IAM, network security, compliance frameworks).
• Ability to troubleshoot network, DNS, firewall, and routing.
• Understand and develop concepts related to deploying services via CI/CD pipeline.
• Experience with creation of automated workflows using Terraform (Sentinel) and GitHub Actions.