Senior Cloud Security & DevSecOps Engineer

Capgemini; Toronto; On-site; CAD 80,000 - 90,000; Full time

Benefits offered by this job

Comprehensive benefits

Job summary

Capgemini is seeking a Senior Cloud Security & DevSecOps Engineer to design, secure, automate, and operate enterprise multi-cloud platforms. You will embed security controls into infrastructure, CI/CD pipelines, container platforms, and application-delivery processes while improving reliability and compliance.

The role requires hands-on experience with AWS, Terraform, Kubernetes, IAM, and vulnerability management, plus SRE practices.

Qualifications

• Experience designing secure, multi-cloud environments with strong cloud security controls.
• Hands-on Terraform, Ansible, Docker, Kubernetes, Jenkins, and Azure DevOps.
• Proficiency in IAM, encryption, secrets management, and vulnerability management.
• Knowledge of PCI DSS, SOC 2, ISO 27001, CIS benchmarks is preferred.

Responsibilities

• Architect and maintain secure cloud and cloud-native environments.
• Embed security into CI/CD pipelines and IaC workflows.
• Lead threat modeling, incident response, and security reviews.
• Implement monitoring, logging, and observability across platforms.

Skills

AWS security

Cloud security

SRE practices

CI/CD security

Python scripting

Tools

Terraform

Ansible

Docker

Kubernetes

Jenkins

Azure DevOps

Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.Job DescriptionExperience: 6+ yearsRole Overview:We are seeking a Senior Cloud Security & DevSecOps Engineer to design, secure, automate, and operate enterprise multi-cloud platforms. The role will embed security controls into infrastructure, CI/CD pipelines, container platforms, and application-delivery processes while improving reliability, compliance, and operational resilience.The successful candidate will bring strong experience across AWS, Azure, infrastructure as code, Kubernetes, cloud security, identity and access management, vulnerability management, observability, incident response, and site reliability engineering.Key Responsibilities:Architect and maintain secure, scalable cloud and cloud-native environments.Embed security controls into CI/CD pipelines and infrastructure-provisioning workflows.Develop infrastructure as code using Terraform and configuration automation using Ansible.Design and implement least-privilege IAM, encryption, secrets management, logging, and cloud-governance controls.Support AWS security capabilities across networking, compute, storage, monitoring, threat detection, and configuration management.Implement security scanning, policy enforcement, SAST, DAST, and container-security controls.Manage cloud-native deployments using Docker, Kubernetes, Jenkins, and Azure DevOps.Design high-availability, blue-green deployment, rollback, and disaster-recovery strategies.Build monitoring, alerting, and observability solutions using CloudWatch, Datadog, ELK, Splunk, or comparable platforms.Conduct vulnerability assessments, patch management, server hardening, and security-remediation activities.Participate in threat modeling, security architecture reviews, attack-surface analysis, and risk assessments.Support incident triage, log correlation, root-cause analysis, escalation, and response playbooks.Implement and review controls aligned with PCI DSS, SOC 2, ISO 27001, and CIS benchmarks.Support Site Reliability Engineering practices covering availability, scalability, performance, and operational excellence.Maintain technical documentation, standard operating procedures, and security playbooks.Required Skills:Strong experience with AWS and working knowledge of Azure or GCP.Hands-on experience with Terraform, Ansible, Docker, Kubernetes, Jenkins, and Azure DevOps.Strong experience with AWS IAM, VPC, EC2, EKS, ECS, S3, CloudWatch, AWS Config, KMS, WAF, and load-balancing services.Experience with cloud security, IAM governance, network security, encryption, and secrets management.Experience implementing infrastructure as code and automated CI/CD pipelines.Experience with SIEM, vulnerability management, security scanning, and incident response.Scripting skills using Python, Bash, or PowerShell.Knowledge of SAST, DAST, EDR, NDR, PAM, Active Directory, and firewall controls.Experience with monitoring and observability tools.Understanding of SRE, high availability, resilient systems, and production reliability.Familiarity with security and compliance frameworks such as PCI DSS, SOC 2, ISO 27001, and CIS.Preferred Skills:Experience with Guard Duty, Security Hub, CloudTrail, Wazuh, or similar security platforms.Experience with Snowflake and SaaS platform operations.Knowledge of Kafka, RabbitMQ, Redis, PostgreSQL, MySQL, or Oracle.Exposure to MITRE ATT&CK, MITRE ATLAS, and OWASP guidance for AI or LLM applications.Experience securing AI platforms or automating adversarial security testing.Familiarity with GitHub Copilot or AI-enabled development tooling.The base compensation range for this role in the posted location is: 80,000 - 90,000.Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.It is not typical for candidates to be hired at or near the top of the posted compensation range.In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick LeaveMedical, dental, and vision coverage (or provincial healthcare coordination in Canada)Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)Life and disability insuranceEmployee assistance programsOther benefits as provided by local policy and eligibilityImportant Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini’s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.DisclaimersCapgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.Click the following link for more information on your rights as an Applicant in the United States. http://www.capgemini.com/resources/equal-employment-opportunity-is-the-lawCapgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.