Principal Security Engineer

Sylogist; Canada; Remote; CAD 100,000 - 130,000; Full time

Job summary

A leading SaaS provider in Canada is seeking a Principal Security Engineer to develop and oversee security protocols and compliance programs. The role requires a strong background in information security and cloud infrastructure management, with 5+ years of experience and relevant certifications. The company promotes a healthy work-life balance and offers comprehensive benefits. Please note, sponsorships are not available for this position.

Benefits

Healthy work-life balance

Comprehensive health benefits

Opportunities for professional growth

Qualifications

• 5+ years of experience in information security.
• Proficiency in Azure IaaS/PaaS.
• Deep knowledge of GDPR and PCI DSS.

Responsibilities

• Develop and oversee security protocols and compliance programs.
• Respond to and investigate security incidents.
• Maintain training records for compliance audits.

Skills

Information security

Cloud infrastructure management

Crisis management

Excellent communication skills

Strategic planning

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Azure IaaS/PaaS

Terraform

Bicep

SIEM tools

Job description

Overview

At Sylogist, we are purpose-driven to “empower the good our customers do.” We provide SaaS-based software solutions to the non-profit, government, and education sectors, and we take immense pride in the work of our customers and the products we build to support them. Our team is collaborative, enthusiastic and delivers on our promises. If you want to apply your skills to improve trusted technology that supports over 2000 customers around the world, then let’s talk!

Position Overview: Reporting to the Chief Information & Technology Officer (CITO), the Principal Security Engineer will be responsible for developing, implementing, and overseeing security protocols, compliance programs, and risk management strategies across Sylogist. The successful candidate will bring a strong background in cloud infrastructure management, compliance frameworks, and strategic security planning.

Responsibilities

• Enhance security team accomplishments and competencies by planning the delivery of solutions and responding to technical RFPs and miscellaneous questions.
• Define security protocols by evaluating business strategies and requirements.
• Develop, review, and approve installation requirements for LANs, WANs, VPNs, firewalls, routers, and related network devices.
• Execute corporate identity and access control by implementing Azure AD solutions, MFA, and Privileged Access Management (PAM).
• Respond to and investigate security incidents, providing thorough post-event analysis.
• Manage secure phishing programs and ensure compliance through tools and ongoing training.
• Develop and maintain a corporate security roadmap to include ongoing system upgrades.
• Conduct vulnerability scans, penetration tests, and incident response drills.
• Verify security systems by developing and implementing test scripts.
• Stay current on emerging security practices and standards; participate in educational opportunities, review professional publications, and engage in professional organizations.
• Partner with DevOps and architectural teams on security best practices.
• Document and review corporate policies to ensure compliance with NIST and other industry standards.
• Review and ensure product compliance with privacy requirements (GDPR, CCPA, PIPEDA, and global privacy laws).
• Implement data classification, encryption (at rest/in transit), and DLP solutions.
• Develop, implement, and document disaster recovery and business continuity plans.
• Conduct Privacy Impact Assessments (PIAs) for new systems and data flows.
• Conduct quarterly security workshops on emerging threats (e.g., ransomware, social engineering).
• Maintain training records for compliance audits (SOC 2, ISO 27001).
• Manage third-party risk assessments (including Microsoft Azure environments).
• Monitor compliance of SaaS vendors.

What We Look for in You

Must Haves

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 5+ years of experience in information security.
• Cloud infrastructure management experience.
• Certifications such as CISSP, CISM, Azure Solutions Architect Expert, Azure Security Architect Expert, or CCSP (preferred).
• Proficiency in Azure IaaS/PaaS, IaC (Terraform/Bicep), and SIEM tools.
• Deep knowledge of GDPR, SOC 2, NIST CSF, and PCI DSS.
• Experience managing global compliance programs.
• Strategic planning, vendor negotiation, and crisis management skills.
• Strong working knowledge of IT risks, cybersecurity, and operating systems.
• Excellent communication and interpersonal skills.

Nice-to-Haves

• Microsoft Azure security certification.
• Additional advanced security or cloud certifications.
• Experience with privacy compliance programs across multiple jurisdictions.

Why Join Sylogist?

We\'re an inclusive company that values the personal and professional growth of its employees! At Sylogist, you\'ll experience:

• A company where you can really make a meaningful impact
• A healthy work-life balance
• Benefits that cover health, wealth, and wellness
• Sylogist is a remote-first company.

Sylogist does not offer sponsorships. All candidates must provide proper employment documentation showing immediate eligibility to work in the country in which the role is based.

If you’re as excited about making a difference as we are, we would love to hear from you!

Sylogist is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Sylogist will not discriminate or retaliate against applicants who inquire about, disclose, or discuss their compensation or that of other applicants.

EEO and Application Information

Sylogist is an Equal Opportunity Employer and does not discriminate on the basis of any protected characteristic. All applicants will be considered for employment opportunities without regard to race, color, religion, sex, gender identity, national origin, disability, or veteran status.