Security Automation Engineer-Python / CISSP

BeachHead Inc.; Toronto; On-site; CAD 130,000 - 170,000; Full time

Job summary

You should have 8+ years in security environments and strong Python 5+ years with FastAPI, plus 3+ years of IaC/tooling experience. Excellent problem-solving and independent work are essential for success.

Qualifications

• 8+ years in security-focused tech environments with a track record of delivering secure automation.
• 5+ years hands-on Python with FastAPI for enterprise-grade workflows.
• 3+ years using IaC and automation tools (Ansible, Terraform, Jenkins, GitHub Actions).

Responsibilities

• Design, develop, and maintain RESTful APIs using Python and FastAPI for cryptographic workflows.
• Integrate API gateways with ServiceNow, KMS, and other DevOps platforms.
• Participate in code reviews, architecture discussions, and document API contracts.
• Develop and execute unit and integration tests to ensure code quality.
• Support production troubleshooting and provide Level 3 assistance.
• Collaborate with team to define specs, troubleshoot issues, and improve automation.
• Maintain documentation for developed solutions and processes.
• Ensure security standards and best practices in cryptographic operations.

Skills

Security environments

Python / FastAPI

Automation / IaC

Cryptography / PKI

Communication / problem-solving

Independent work

Tools

HashiCorp Vault

Venafi

CyberArk

ServiceNow

Job description

Are you an experienced Specialty Developer looking to contribute to critical security projects?

Working with one of our top financial clients, this role calls for a Security Automation Engineer-Python / CISSP. You will be integral to developing and maintaining enterprise cryptographic automation solutions that safeguard organizational data and systems. This position offers the opportunity to work on innovative projects within a dynamic team, supporting security operations, and expanding your technical expertise.

Responsibilities

• Design, develop, and maintain RESTful APIs using Python and FastAPI for cryptographic workflows.
• Integrate API gateways with systems like ServiceNow, KMS, and other DevOps platforms.
• Participate in code reviews, architecture discussions, and document API contracts.
• Develop and execute unit and integration tests to ensure code quality.
• Support production troubleshooting and provide Level 3 assistance.
• Collaborate with team members to define specifications, troubleshoot issues, and improve automation processes.
• Maintain documentation for developed solutions and processes.
• Ensure security standards are met and uphold best practices in cryptographic operations.

Desired Skill-Set

• 8+ years of experience in security-related technology environments.
• 5+ years of hands-on experience with Python, specifically FastAPI.
• 3+ years of experience with automation and Infrastructure-as-Code tools such as Ansible, Terraform, Jenkins, or GitHub Actions.
• Strong understanding of cryptographic operations, key management, and certificate lifecycle management.
• Excellent problem-solving skills and attention to detail.
• Effective communication skills, both written and verbal.
• Ability to manage priorities and work independently.

Nice to Have

• Familiarity with TLS/SSL certificates and PKI concepts.
• Experience with Venafi, HashiCorp Vault, and CyberArk.
• Knowledge of ServiceNow integrations, including CMDB and workflows.
• Experience supporting Linux and Windows server environments.
• Venafi REST API expertise.

BeachHead is an equal opportunity agency and employer. We advocate for our candidates and welcome applicants regardless of race, color, religion, national origin, sex, age, or physical or mental disability. BeachHead or our clients may use technology-enabled tools, including automation and artificial intelligence (AI), to support parts of the recruitment process such as resume screening, application management, and candidate matching. These tools assist our recruiters and our clients, and do not replace human decision-making. This job posting represents a current or anticipated vacancy. The position may be filled at any time, and the posting may be removed without notice once the role has been filled.