Technology - Senior Engineer/Engineer, Cybersecurity

United States of Aritzia; Vancouver; On-site; CAD 110,000 - 160,000; Full time

Job summary

Aritzia is growing its Cybersecurity team and this Senior Engineer/Engineer, Cybersecurity role will design, implement, automate, and continuously improve security across enterprise technology, hybrid cloud, retail, eCommerce, endpoint, identity, API, software delivery, and AI-enabled environments.

You will combine hands-on security engineering with DevSecOps and automation to enable the business to operate securely and innovate.

Qualifications

• Bachelor's degree or equivalent practical experience in computer science, cybersecurity, or software engineering.
• Hands-on experience with cloud services across Azure, AWS, GCP, and managing identity platforms.
• Strong software engineering background with development in Python and automation
• Experience embedding security into CI/CD pipelines and building secure automation.

Responsibilities

• Configure, operate, and improve security controls to meet requirements and compliance.
• Engineer, tune, and maintain security tooling across EDR, SIEM, WAF, IAM, DLP, and vulnerability management.
• Establish secure baselines for Windows, Linux, cloud services, endpoints, networks, and apps.
• Implement least-privilege access and secure secrets management across pipelines.
• Embed security controls into CI/CD pipelines, IaC, and deployment workflows with engineering teams.
• Provide telemetry, logs, alerts for security monitoring and incident response.
• Document architecture, runbooks, SOPs, and training materials.

Skills

Python

PowerShell

Automation

CI/CD pipelines

GitHub Actions

REST APIs

EDR/SIEM/WAF

Education

Bachelor's degree in Computer Science or related field

Tools

Azure

GCP

AWS

Entra ID

Exchange Online

Microsoft 365

Job description

THE BUSINESS

We are Everyday Luxury.

It's what we do and how we do it - together.

It's working alongside world-class talent in pursuit of world-class results.

It's maximizing your potential in a high-performance culture.

It's knowing that wherever you are, you belong.

It's elevating your world - and the world of those who love and will love Aritzia.

It's You. And an endless runway of opportunity.

With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America - including Toronto, New York, Los Angeles and Seattle - our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So, you can do what you do best - with us.

The TEAM

The mission of the Cybersecurity Department is to deliver high-quality cybersecurity services and solutions that minimize risk across Aritzia's systems and data.

The OPPORTUNITY

Aritzia is growing and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the team responsible for designing, engineering, and enabling secure technology solutions that protect Aritzia's systems and data, reduce cybersecurity risk, and enable the business to operate and innovate securely. As the Senior Engineer/Engineer, Cybersecurity, you will engineer, implement, automate, and continuously improve security across enterprise technology, hybrid cloud, retail, eCommerce, endpoint, identity, application, API, software delivery, and AI-enabled environments. You will combine Hands-on security engineering with DevSecOps and automation, implementing and tuning security technologies, hardening systems and endpoints, embedding practical controls into development and deployment workflows, automating security assurance and remediation, and making controls observable and supportable. With your valuable contribution to the business in this role, the opportunities are endless, from a rewarding career in Cybersecurity to continued growth and development with Aritzia.

The ROLE

• Configure, integrate, test, monitor, and improve enterprise security controls to meet defined security requirements, operational standards, and compliance obligations.
• Engineer, operate, and tune enterprise security tooling across EDR, SIEM, WAF, IAM, DLP, firewalls, secrets, and vulnerability management.
• Establish and maintain secure configuration baselines for Windows, Linux, cloud services, endpoints, network devices, applications, and supporting platforms.
• Implement least-privilege access, workload identity federation, credential rotation, and secure secrets management across applications and pipelines.
• Embed security controls across CI/CD pipelines, IaC, and deployment workflows, partnering with engineering teams to test and validate application and API security.
• Implement security controls for AI/agentic applications, including workload identities, tool permissions, trust boundaries, human-in-the-loop approvals, and untrusted-input testing.
• Ensure controls produce useful telemetry, logs, alerts, and evidence for security monitoring, incident response, investigations, and compliance obligations such as PCI DSS.
• Provide technical support during security incidents and investigations, participate in response and recovery activities, and contribute technical analysis to root cause identification and corrective actions.
• Support with evaluating new security technologies, integrations, and design patterns; conduct proof of concept testing and document findings; and support architecture and solution recommendations.
• Support with maintaining comprehensive technical documentation, including architecture diagrams, runbooks, standard operating procedures, and training materials.

The QUALIFICATIONS

The Senior Engineer/Engineer, Cybersecurity has:

• Proven skills, certifications, education, and/or experience: Bachelor's degree in computer science, Software Engineering, Cybersecurity, or equivalent practical experience in full-stack software engineering and cloud security engineering.
• Hands-on experience implementing, automating, and supporting cloud services across Azure, GCP, or AWS, and administering Entra ID, Exchange Online, and Microsoft 365.
• Strong software engineering background with proficiency in Python and PowerShell. Extensive experience building automation, working with REST APIs, managing code in GitHub (Actions, Webhooks, Repositories), and embedding security into CI/CD pipelines.
• Hands-on experience enforcing policy, posture, and endpoint security across hybrid fleets using Microsoft Intune (Windows/iOS/Android) and Jamf Pro (macOS).
• Hands-on experience monitoring and hardening multi-cloud environments using CNAPP tooling (e.g., Wiz, Defender for Cloud, GCP Security Command Center), enforcing IaC policy-as-code, and building automated remediation workflows.
• Background in core security tooling (EDR, SIEM, WAF, DLP) and modern identity controls (Con