Senior DevSecOps Engineer

Maxa AI; Montreal (administrative region); Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading AI company in Montreal is seeking a Senior DevSecOps Engineer to build and secure crucial cloud and Snowflake infrastructure. This hybrid position involves ensuring system reliability, maintaining uptime SLAs, and implementing security practices. You will collaborate closely with various teams while shaping the DevSecOps function. The ideal candidate has over 5 years of experience and expertise in Terraform, CI/CD, and cloud environments, making this a pivotal role in a growing AI-focused enterprise.

Benefits

Competitive base salary

4 weeks vacation in year one, 5 weeks thereafter

RRSP employer contribution after 3 months

On-site chef for lunches

Stock options in a high-growth AI company

Qualifications

• 5+ years of experience in DevSecOps, CloudOps, or infrastructure engineering.
• Deep hands-on experience in cloud fundamentals including security.
• Experience with monitoring and observability tooling.

Responsibilities

• Ensure reliability and availability across environments.
• Create and optimize CI/CD pipelines for cloud services.
• Implement security standards in cloud and Snowflake environments.

Skills

DevSecOps

CloudOps

Terraform

CI/CD systems

Kubernetes

Python scripting

Tools

Snowflake

GitOps

Prometheus

Grafana

Job description

TL;DR

• AI-First Senior DevSecOps Engineer
• Montreal (Hybrid: Tues–Thurs in office)
• Build and secure the cloud + Snowflake infrastructure powering one of only 3 Snowflake Native Apps in the world.
• Be the infrastructure guardian of enterprise AI—where deep cloud engineering meets cutting‑edge data platforms.

Secure the Infrastructure That Enterprises Trust

Maxa, an AI‑first company, is seeking a Senior DevSecOps Engineer to build and secure the cloud and Snowflake foundations behind our finance‑grade AI products.

Maxa Analyst is the first auditable finance AI analyst, delivering CFO‑ready, audit‑proof answers in seconds. The infrastructure powering this must be ultra‑reliable, secure, observable, and scalable—and that will be your domain.

Your work ensures that every environment, deployment, and Snowflake Native App we ship is resilient, high‑performing, and trustworthy enough for enterprise use. As one of the earliest members of our DevSecOps function, you’ll shape our infrastructure strategy, own key operational systems, and become an asset in our team of Snowflake infrastructure experts.

The Impact You’ll Make

As our Senior DevSecOps Engineer, you’ll sit at the intersection of cloud engineering, security, and data platform operations. You’ll work closely with Product, Engineering, and Data teams to design, automate, and secure the full lifecycle of our cloud and Snowflake environments.

You’ll be responsible for:

Keeping mission‑critical infrastructure running flawlessly

• Ensuring reliability and availability across GCP (or AWS/Azure) environments
• Maintaining our 99.9% uptime SLA through proactive monitoring and rapid incident response
• Managing Snowflake infrastructure and overseeing deployment of Snowflake Native Apps to customer accounts

Building automation foundations that accelerate product velocity

• Creating and optimizing CI/CD pipelines for cloud services and Snowflake artifacts
• Implementing GitOps workflows with tools like ArgoCD and GitHub Actions
• Using Terraform and other IaC tools to define consistent, scalable infrastructure
• Designing automated test frameworks for infrastructure changes
• Leveraging advanced tooling (including agentic AI and coding assistants) to accelerate automation and quality

Becoming a cornerstone of security and compliance

• Ensuring cloud and Snowflake environments follow best‑practice security standards
• Implementing Zero Trust Architecture
• Managing secrets with Vault, GCP Secret Manager, or equivalents
• Supporting audits, compliance activities, and secure‑by‑default design

Leading reliability culture within the engineering organization

• Driving incident response and root‑cause analysis
• Partnering with developers and data engineers to integrate DevSecOps practices
• Mentoring junior CloudOps engineers and upleveling our operations maturity

You’re the Right Fit If You Have:

Core Infrastructure Expertise (5+ years)

• Deep hands‑on experience in DevSecOps, CloudOps, or infrastructure engineering
• Strong IaC experience—Terraform expert
• Cloud fundamentals across IAM, networking, workload identity, and security (GCP preferred, AWS/Azure accepted)
• Production experience with Kubernetes, Docker, VPCs, firewalls, load balancers
• GitOps + CI/CD systems (ArgoCD, GitHub Actions, etc.)
• Monitoring/observability tooling (Prometheus, Grafana, Cloud Monitoring)

Snowflake / Data Platform Expertise

Either:

• Experience with Snowflake (or BigQuery/Redshift/Databricks)
• SQL and data operations literacy
• Strong infrastructure engineer ready to become a Snowflake expert (training provided)

Additional Technical Strengths

• Python scripting for automation
• Bash/Scripting familiarity
• Infrastructure testing frameworks
• Understanding of distributed systems concepts

This Position Is NOT for You If:

• You prefer a mature, fully built DevOps environment rather than constructing one
• You want narrow specialization vs. broad cloud + Snowflake ownership
• You prefer to avoid security responsibilities
• You’re uncomfortable being a core operator in a high‑stakes production environment
• You want minimal cross‑team collaboration

What We Offer

• Competitive base salary (aligned to seniority; this is a newly created role)
• 4 weeks vacation in year one, 5 weeks thereafter
• RRSP employer contribution after 3 months
• On‑site chef: three‑course lunches for $12
• Stock options in a post–Series A high‑growth AI company
• The opportunity to define the infrastructure and security standards for enterprise AI

What Your First Weeks Will Look Like

You’ll join the Infrastructure & DevSecOps group under Bruno Hivert, DevOps, Security and Infrastructure Team Lead.

In your first days:

• You’ll get full access to our cloud + Snowflake environments
• We’ll introduce you to our Snowflake Native App customers and deployment flows
• You’ll begin refining our IaC standards, CI/CD pipelines, and observability setup

By week 2:

• You’ll be deploying updates to Snowflake Native Apps
• You’ll be leading improvements to monitoring, security posture, and automation workflows
• Your work will directly influence customer reliability and product velocity

Recruitment Process

• Initial screening with Gen (30 min, GMeet)
  • Background + culture fit
• Hiring Manager Interview with Bruno + Raya (45 min, GMeet)
  • Technical depth, ownership expectations
• Technical Deep Dive (90 min, in‑person)
  • Cloud + infrastructure architecture discussion
  • Practical review of IaC, CI/CD, monitoring, and Snowflake operations

Timeline: ~2–3 weeks from application to offer