Principal DevSecOps Developer

Uplift; Canada; On-site; CAD 150,000 - 200,000; Full time

Benefits offered by this job

Stock options

Medical insurance

Dental insurance

Vision insurance

Flexible PTO

Parental leave

Wellness initiatives

Job summary

Uplift is seeking a highly technical Principal DevSecOps Developer to strengthen security automation and the SaaS environment. You will build scalable security solutions, leverage AI to optimize workflows, and work across Security, Engineering, DevOps and IT teams to improve processes.

The role emphasizes hands-on engineering, secure integrations via APIs, and scalable infrastructure-as-code with Terraform in a fast-paced environment.

Qualifications

• Hands-on AWS security experience, IAM permissions and least-privilege.
• Strong automation and scripting skills across multiple languages.
• Independently write and maintain Terraform modules.
• Experience with APIs, authentication, and secure integrations.

Responsibilities

• Build and maintain security automation workflows.
• Develop infrastructure as code using Terraform.
• Implement AWS security controls and least-privilege access.
• Create secure integrations between systems via APIs and scripting.
• Investigate and resolve security risks across cloud and on‑prem.
• Leverage AI tools to improve security workflows.
• Troubleshoot across infrastructure, networking and tools.
• Enhance security monitoring, detection and response.

Skills

Programming

Automation

AWS Security

Terraform

APIs & IAM

Troubleshooting

AI tools usage

Independent work

Tools

AWS

Terraform

Kubernetes

Docker

Sumo Logic

CrowdStrike

Okta

Job description

About the Role:

We are looking for a highly technical, hands-on Principal DevSecOps Developer to join Upgrade's Security team. In this role, you'll focus on building and improving security automation, strengthening our SaaS environment, and developing scalable solutions that enhance security operations across the organization.

You'll leverage your programming and scripting skills, hands‑on operations experience, and understanding of APIs, IAM permissions, and security best practices to solve complex technical challenges. You'll analyze code, troubleshoot technical issues, and apply risk‑based thinking to identify vulnerabilities and implement effective security controls.

This is a highly autonomous, engineering‑focused role where you'll have the opportunity to build security automations from the ground up, leverage AI to improve workflows, and solve challenging security problems. You'll work closely with Security, Engineering, DevOps, and IT teams to streamline processes.

Our Core Technologies:

AWS (IAM, Security Services), Terraform, Python, Bash, REST APIs, AI/LLM Tools (Claude, AI Agents, MCP), Tines/SOAR, Sumo Logic, CrowdStrike, Okta, Akamai, Sublime Security, SIGMA/YARA, Kubernetes, Docker, CI/CD Pipelines, FleetDM/osquery, GCP, Google Workspace, Microsoft Entra ID, Microsoft 365.

What You’ll Do:

• Build and maintain security automation workflows to reduce manual processes.
• Develop and manage infrastructure as code using Terraform.
• Implement AWS security controls, including IAM policies and least‑privilege access.
• Build secure integrations between systems using APIs and scripting.
• Identify, investigate, and resolve security risks across cloud infrastructure and internal systems.
• Use AI tools, agents, and MCP integrations to improve security workflows.
• Troubleshoot issues across infrastructure, networking, and security tools.
• Develop and improve security monitoring, detection, and response capabilities.
• Partner with Engineering, DevOps, and IT teams to implement security improvements.
• Proactively identify opportunities to strengthen security and automate processes.

What We Look For:

• Strong programming, scripting, and automation skills across one or more languages.
• Hands‑on AWS security experience, including IAM permissions and least‑privilege principles.
• Strong Terraform skills, including independently writing and maintaining modules.
• Solid understanding of APIs, authentication, and secure integrations.
• Knowledge of security fundamentals, risk analysis, and cloud security best practices.
• Strong troubleshooting skills across infrastructure, networking, and technical operations.
• Experience using AI development tools while independently validating generated code.
• Familiarity with AI agents, automation frameworks, or MCP integrations.
• Ability to work independently and solve complex technical problems.
• Strong communication, collaboration, and problem‑solving skills.

Nice to Have:

• Experience with Tines or other SOAR platforms.
• Familiarity with CrowdStrike, Okta, Akamai, or Sublime Security.
• Experience with Sumo Logic or similar monitoring tools.
• Experience writing SIGMA or YARA detection rules.
• Understanding of event‑driven architecture and enterprise IT systems.
• Experience with Kubernetes and container security.
• Knowledge of OWASP principles, including LLM/AI security.
• Experience with FleetDM, osquery, or endpoint security tools.
• Familiarity with GCP, Google Workspace, or Microsoft Entra ID.
• Experience with CI/CD pipeline security or software supply chain security.
• Threat hunting or security investigation experience.
• Exposure to security compliance frameworks.

What Will Make You Successful:

• You take ownership and work independently with minimal direction.
• You identify problems and proactively develop solutions.
• You are curious, adaptable, and eager to learn new technologies.
• You use AI effectively without relying on it for every task, and are able to leverage your own knowledge and experience to challenge its assertions.
• You communicate openly and collaborate well across teams.
• You enjoy improving processes and making a measurable impact.

What We Offer You:

• Competitive salary ($150k-$200k+) and stock option plan
• Paid coverage of medical, dental and vision insurance
• Flexible PTO
• Opportunities for professional growth and development
• Paid parental leave
• Health & wellness initiatives