Senior DevSecOps & Cloud Security Engineer (PL7326)

Paralucent; Toronto; Sur place; CAD 130 000 - 170 000; Plein temps

Résumé du poste

Paralucent is seeking a Senior DevSecOps & Cloud Security Engineer to build secure delivery pipelines and operational controls for a regulated enterprise platform. You will embed security, reliability and evidence into infrastructure, CI/CD, identity, observability, vulnerability management, backup, recovery and production readiness.

You will collaborate closely with architects, developers, QA and enterprise control teams to ensure secure, compliant, and resilient delivery across environments.

Qualifications

• 7+ years in DevOps, platform engineering, cloud security or site reliability engineering.
• Experience with banking/financial services or regulated industries is a plus.
• Hands-on with security gates in CI/CD and automated testing.
• Experience with containers/serverless and modern observability practices.
• Assurance of audit-ready evidence and control workflows.

Responsabilités

• Design and implement infrastructure-as-code, environment provisioning and secure CI/CD pipelines.
• Embed code, dependency, container, infrastructure and secrets scanning into delivery workflows.
• Implement identity and access controls, least privilege and privileged-access safeguards.
• Configure secure networking, encryption, logging and audit evidence.
• Define vulnerability-management, patching and remediation processes.
• Implement backup, restore, disaster-recovery and DR test automation.
• Create production-readiness dashboards, SLOs/alerts and runbooks.
• Partner with enterprise cyber, privacy, architecture, risk and audit teams.
• Support release, cutover, hypercare and incident response.

Connaissances

DevOps

Cloud security

CI/CD

Audit readiness

Vulnerability mgmt

Incident response

Observability

Containers/Serverless

IAM & security controls

Networking

Outils

AWS

Azure

Terraform

CI/CD tooling

Description du poste

Paralucent is seeking a Senior DevSecOps & Cloud Security Engineer to build secure delivery pipelines and operational controls for a regulated enterprise platform. You will embed security, reliability and evidence into infrastructure, CI/CD, identity, observability, vulnerability management, backup, recovery and production readiness.

You will work closely with architects, developers, QA and enterprise control teams.

What You'll Do

• Design and implement infrastructure-as-code, environment provisioning and secure CI/CD pipelines.

• Embed code, dependency, container, infrastructure and secrets scanning into delivery workflows.

• Implement identity and access controls, service identities, least privilege, segregation of duties and privileged-access safeguards.

• Configure secure networking, encryption, key/secrets management, logging, monitoring, alerting and audit evidence.

• Define vulnerability-management, patching, remediation and penetration-testing support processes.

• Implement backup, restore, resilience, disaster-recovery and recovery-test automation aligned to approved RTO/RPO objectives.

• Support privacy/data-residency controls, records retention, data lifecycle and secure destruction.

• Create operational dashboards, SLOs/alerts, incident runbooks and production-readiness evidence.

• Partner with enterprise cyber, privacy, architecture, risk and audit stakeholders.

• Support release, cutover, hypercare, incident response and root-cause analysis.

What Success Looks Like

• Environments are reproducible, secure and consistently deployed through automation.

• Security checks operate early in CI/CD and material findings are resolved before production.

• Access, secrets and audit evidence meet approved control requirements.

• Monitoring detects meaningful failures and runbooks support rapid diagnosis and recovery.

• Backup and disaster-recovery capabilities are tested and evidenced, not merely documented.

• 7+ years in DevOps, platform engineering, cloud security or site reliability engineering.

• Strong AWS and/or Azure experience, including infrastructure-as-code, networking, IAM, logging, monitoring and security services.

• Hands-on CI/CD experience with automated testing and security gates.

• Experience supporting sensitive workloads in banking/financial services preferred; regulated-industry experience accepted.

• Working knowledge of vulnerability management, secure SDLC, incident response, penetration testing, backup and DR.

• Experience with containers/serverless and modern observability practices.

• Ability to produce audit-ready evidence and work effectively with enterprise control functions.

Preferred Experience

• Cloud security or DevOps certification.

• Experience with SOC 2-aligned controls, NIST/ISO frameworks or financial-institution security reviews.

• Experience securing AI/model services, RPA workers and enterprise integrations.

• Experience with privacy, retention and Canadian data-residency considerations.

Role Scorecard: Illustrative Measures

Final targets and cadence will be confirmed for the specific assignment. Typical measures include:

• Pipeline deployment success and lead time

• Security finding age and closure

• Infrastructure drift and configuration compliance

• Availability/incident and recovery trends

• Backup/DR test success

• Monitoring coverage and alert quality

• Production-readiness evidence completeness

How You Demonstrate Our Core Values

Driven: Moves important work forward, recovers quickly from blockers and focuses on meaningful outcomes.

Takes Ownership: Closes loops, communicates risks early and remains accountable across handoffs.

Creative Problem Solver: Clarifies the real problem and proposes practical options with trade-offs.

Humbly Confident: Brings sound judgment, explains reasoning and actively invites challenge and feedback.

Customer Centric: Understands operational reality, success measures and the impact of decisions on users and the institution.