Senior Staff Security Engineer | Systems Engineering

ServiceNow; Toronto; Remote; CAD 140,000 - 190,000; Full time

Job summary

ServiceNow is seeking a Senior Staff Security Systems Engineer to support multiple security engineering functions in the Canadian regulated environment. This role focuses on identity, vulnerability management, cloud and infrastructure security, security data platforms, and security operations.

You will build automation, operate security controls, and deliver reporting to senior stakeholders while influencing security posture across the organization.

Qualifications

• 12+ years of hands-on security or systems engineering in large enterprises.
• Expert Linux administration across OS internals, DNS, NTP, LDAP.
• Proficiency in Python and Shell for automation.
• Experience with DevOps: IaC, Terraform/Ansible, CI/CD, Git workflows.
• Strong knowledge of network security fundamentals (firewalls, segmentation, proxies).
• Experience with Canada Protected B classification and data residency requirements.

Responsibilities

• Serve as senior technical authority for security engineering in the Canada regulated environment.
• Hardening and operation of security controls across on‑premises, cloud, and isolated infrastructure.
• Build automation and infrastructure-as-code to streamline security engineering and operations.
• Partner with infrastructure and platform teams to drive remediation and track CIS/NIST compliance.
• Produce operational and executive reporting on security posture and performance.

Skills

Security engineering

Linux administration

Python

DevOps

Cloud security

AI in work

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Ansible

Puppet

Tenable

Splunk

Cribl

Cloud providers (GCP, AWS, Azure)

Job description

• Full-time
• Employee Type: Regular
• Region: AMS - North America and Canada
• Work Persona: Flexible or Remote

Company Description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.

Join us to put AI to work for people.

Job Description

This position supports Government of Canada Protected B workloads. To be considered, you must:

• Be a Canadian citizen or Canadian permanent resident.
• Live in Canada and perform all work from within Canada.
• Obtain and maintain Government of Canada Reliability Status. Screening requires five years of verifiable background history and includes identity verification, education verification, a criminal record check, and a credit check.

You don’t need to hold Reliability Status today. ServiceNow sponsors the screening through our Company Security Officer under Public Services and Procurement Canada’s Contract Security Program.

The ServiceNow Security Organization (SSO)

The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact

About the Role

ServiceNow’s Enterprise Security organization is seeking a versatile Senior Staff Security Systems Engineer to support multiple security engineering functions in our Canadian regulated environment. You’ll work across identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations. This role suits an engineer who enjoys breadth, solves problems across disciplines, and builds automation that scales.

What You’ll Do

• Serve as the senior technical authority for security engineering in the Canada regulated environment.
• Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
• Build automation and infrastructure-as-code that streamlines security engineering and operations, reporting, and remediation.
• Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
• Support security tooling across identity, vulnerability scanning, logging and cloud security based on team priorities.
• Produce operational and executive‑facing reporting on security posture and performance.

Qualifications

Required Qualifications

• 12+ years of hands‑on security or systems engineering experience in large‑scale enterprise environments.
• Expert Linux administration and troubleshooting skills across OS internals, host networking, storage, virtualization, and containers. Proficiency with DNS, NTP, and LDAP services.
• Proficiency in Python and Shell for production‑grade automation and integrations.
• Experience with DevOps methodologies: infrastructure-as-code and configuration management including Terraform, Ansible or Puppet; CI/CD pipelines; and Git‑based workflows.
• Expertise in network security fundamentals, including firewalls, segmentation, load balancers, and proxies.
• Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.
• Experience using AI in your work, whether through AI‑powered tools, automated workflows, AI‑driven insights, or evaluating where AI can change how a function operates.
• Understanding of Canada Protected B classification and data residency requirements for Canadian government systems.

Specialty Experience (Hands‑On Experience in At Least Two Areas)

• Identity and Access Management: PAM (BeyondTrust or CyberArk), SailPoint IIQ, or SSO platforms such as PingFederate or ForgeRock.
• Vulnerability Management: Tenable SC and IO scan design and tuning, and risk‑based prioritization using CVSS, EPSS, and known exploited vulnerability data.
• Public Cloud Security: GCP security with working knowledge of AWS or Azure, Wiz, and CSPM, DSPM, or KSPM tooling.
• Security Data Platforms: Distributed on‑premises Splunk administration and Cribl Stream or Edge.
• Infrastructure Security: OS hardening (SELinux, AppArmor, auditd), PKI and certificate lifecycle management, and container security.
• ServiceNow Security Operations: Well versed in ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response.

Preferred Qualifications

• Certifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.
• Experience supporting highly regulated, isolated, or air‑gapped government environments.
• Strong understanding of ITIL and ITSM processes.

This role may require a higher level of security clearance in the future. Employment is conditional on successfully completing and maintaining the required screening. We can’t consider applications that don’t meet these requirements.

#SecurityJobs

Additional Information

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third‑party service.

Equal Opportunity Employer

ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [e-mail] for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

By clicking the link above or any third‑party link within this posting, you are leaving this site and going to a third‑party website where the third‑party website's terms and privacy policy apply