Want to know if this job is worth applying to?
Canada
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Site Reliability Engineer, Security based in Canada.
This role sits at the intersection of site reliability engineering, cloud infrastructure, distributed systems, and security.
You’ll help operate and evolve production infrastructure supporting critical authorization services at scale.
Your work will strengthen Kubernetes, cloud security, software supply chains, IAM, vulnerability management, and incident response.
You’ll build automation, secure defaults, and platform guardrails that enable engineering teams to move quickly without compromising security.
As a senior member of a small, highly technical team, you’ll have substantial ownership and influence across engineering.
You’ll contribute to architecture, threat modeling, operational resilience, and security strategy while remaining hands-on technically.
The environment is fully remote, collaborative, and designed for engineers who value autonomy, technical rigor, and meaningful impact.
Operate and evolve production Kubernetes and cloud infrastructure with a focus on availability, scalability, performance, reliability, and security.
Strengthen infrastructure security across Kubernetes, cloud platforms, networking, IAM, workload identity, secrets management, encryption, and service-to-service communication.
Secure the software supply chain from source code through production, including CI/CD pipelines, dependencies, container images, build artifacts, provenance, vulnerability scanning, and deployment controls.
Build automated security guardrails, policies, and secure defaults into the engineering platform to reduce reliance on manual security processes.
Improve vulnerability management practices by identifying, prioritizing, and addressing vulnerabilities across containers, dependencies, infrastructure, and cloud services according to exposure and risk.
Expand security telemetry, logging, monitoring, alerting, and detection capabilities, while developing and exercising effective security incident-response procedures.
Participate in the SRE on-call rotation and lead or contribute to production incidents, using post-incident learnings to improve reliability and operational practices.
Partner with engineering teams on architecture and infrastructure decisions, threat modeling, and security considerations throughout the development lifecycle.
Automate operational and security processes wherever possible through strong software engineering practices and platform tooling.
Help shape security engineering strategy by contributing technical expertise to architecture decisions, engineering priorities, customer security requirements, and the broader security posture.
Provide technical leadership across engineering boundaries while maintaining a practical approach to security risk within real-world distributed systems.
Significant professional experience operating production systems as a Site Reliability Engineer, Platform Engineer, Infrastructure Engineer, Security Engineer, or in a closely related role.
Deep hands-on experience with Kubernetes and containerized production environments.
Strong experience with at least one major cloud provider, such as AWS, GCP, or Azure, including its security model.
Strong understanding of IAM, workload identity, networking, TLS/PKI, encryption, secrets management, and cloud-native security.
Experience with Infrastructure as Code; experience with Pulumi is relevant, while Terraform, AWS CDK, or equivalent tooling is also applicable.
Experience designing, operating, and securing CI/CD and software delivery pipelines.
Strong Linux and container security fundamentals.
Experience with observability, monitoring, logging, production operations, and incident response.
Strong software engineering capabilities and a demonstrated ability to solve infrastructure and security challenges through automation.
Sound security judgment and the ability to assess technical risk in the context of distributed systems and production environments.
Ability to work independently, take ownership of complex initiatives, and drive projects across engineering teams.
Strong communication and technical leadership skills suited to a small, highly technical organization.
Experience with distributed databases or other stateful distributed systems is an asset.
Experience securing multi-tenant SaaS or cloud infrastructure is an asset.
Experience with security architecture, threat modeling, penetration testing, or security assessments is an asset.
Relevant certifications such as CKA, CKS, AWS Certified Security – Specialty, CISSP, or CCSP are an asset.
Competitive compensation based on experience and location.
Stock options in an early-stage technology company.
Comprehensive benefits, including healthcare for US-based employees and other insurance coverage.
Fully remote work with a flexible schedule designed to accommodate distributed teams and different time zones.
Twice-yearly team off-sites focused on collaboration, relationship building, and team connection.
Opportunity to work with cutting-edge technology in a rapidly growing sector.
A supportive environment where individual ideas and technical contributions can have significant impact.
High degree of autonomy and ownership within a small, collaborative engineering organization.
