Mid/Senior Security Engineer

Pharmaciepmg; Châteauguay; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

PMG is seeking a Mid/Senior Security Engineer to help design, deploy, and operate secure systems across AWS and Azure in a Canadian setting. You’ll automate controls, integrate security into the development lifecycle, and raise the bar for secure software delivery.

You will partner with development teams to embed security in architecture, code reviews, and CI/CD pipelines, while conducting assessments, PenTests, and implementing robust IAM and cloud configurations.

Qualifications

• At least 5 years of relevant experience in application security, DevSecOps, cloud security or security engineering.
• Strong hands-on experience with AWS and Azure in production environments.
• Experience with GitHub, development workflows and CI/CD integration.
• Ability to read, understand and review code to identify security risks.
• Knowledge of networking, IAM, secrets management, logging, monitoring and cloud architecture.
• Experience in penetration testing and vulnerability management.

Responsibilities

• Design and improve security controls in AWS and Azure.
• Participate in architecture and code reviews to identify risks early in design.
• Secure integrations between applications, APIs, cloud services and enterprise systems.
• Integrate security into CI/CD pipelines, including code, dependency and secret scanning, IaC, and container image scanning.
• Conduct security assessments, vulnerability assessments and targeted penetration tests.
• Review IAM, secrets management, network security, logging, monitoring and cloud configurations.
• Work with development teams to address issues at their source and reduce security debt.
• Contribute to threat detection, incident response and continuous improvement of security posture.
• Develop or improve tools that make security simpler, measurable and repeatable.

Skills

Security engineering

DevSecOps

Cloud security

CI/CD security

Code reading / secure coding

Threat detection / incident response

Automation scripting

Networking knowledge

IAM / secrets management

Container security

Tools

GitHub

CI/CD pipelines

Container image scanning

Job description

We’re looking for a Mid/Senior Security Engineer to help build a modern technology organization where security is integrated into how we design, deploy and operate our systems. You’ll do more than identify vulnerabilities: you’ll help create more secure environments, automate controls and make security a natural part of the development lifecycle.

At PMG, technology is becoming a strategic capability that helps us collaborate more effectively, work more efficiently and simplify daily life for our teams and, ultimately, improve our patients’ experience. Over the past few years, we’ve built a stronger foundation: more robust infrastructure, improved security, more structured development and operations practices, greater automation, and a more integrated approach to our data and tools. We’re now looking to strengthen the team, refine how we work and increase our ability to deliver value quickly and reliably.

Tasks and responsibilities

• Design and improve security controls in AWS and Azure.


• Participate in architecture and code reviews to identify risks early in the design process.


• Secure integrations between applications, APIs, cloud services and enterprise systems.


• Integrate security into CI/CD pipelines, including code, dependency and secret scanning, Infrastructure as Code, and container image scanning.


• Conduct security assessments, vulnerability assessments and targeted penetration tests.


• Review identity and access management (IAM), secrets management, network security, logging, monitoring and cloud configurations.


• Work with development teams to address issues at their source and reduce security debt.


• Contribute to threat detection, incident response and the continuous improvement of our security posture.


• Develop or improve tools that make security simpler, measurable and repeatable.

Skills and qualifications

• At least 5 years of relevant experience in application security, DevSecOps, cloud security or security engineering.


• Strong hands‑on experience with AWS and Azure in production environments.


• Practical experience with GitHub, development workflows and integrating security controls into CI/CD pipelines.


• Ability to read, understand and review code to identify application security risks.


• Good understanding of networking, IAM, secrets management, logging, monitoring and cloud architecture.


• Experience in penetration testing, vulnerability management or security testing, with the ability to prioritize real-world risks.


• Good understanding of APIs, integrations, authentication, authorization and containerized environments.


• Ability to automate using scripts or code and turn security issues into lasting solutions.

Pharmacist Martin Gilbert is solely responsible for the practice of the pharmacy.