Security & Infrastructure Engineer

Role overview

Accountabilities

• Own SOC 2 Type 2 and ISO 27001 programs, including evidence collection, access and vendor reviews, control monitoring, audits, policy updates, and audit readiness.
• Triage and remediate findings across cloud posture, code scanning, dependencies, and secrets using practical risk prioritization.
• Administer cloud and SaaS identity and access, including SSO, federation, least privilege, and joiner, mover, and leaver processes.
• Support endpoint management, device compliance, SaaS administration, asset inventory, and employee IT support.
• Interface with auditors, certification bodies, and customer security and procurement teams.
• Embed guardrails into infrastructure and harden CI/CD pipelines and the software supply chain.
• Diagnose cloud, container, and networking incidents and document root causes through postmortems.
• Maintain technical documentation including runbooks, control narratives, architecture notes, risk assessments, and audit responses.
• Collaborate to improve security maturity, observability, reliability, operational discipline, and scalability.

Requirements

• Experience in security engineering, infrastructure or platform engineering, or a closely related technical discipline.
• Broad knowledge of security, networking, and operating systems, with depth in at least one area.
• Hands-on expertise in routing, firewalls, security groups, DNS, TLS termination, proxies, VPN or private connectivity, and packet capture analysis.
• Strong Linux knowledge covering processes, filesystems, permissions, systemd, resource limits, logs, and container-to-host relationships.
• Practical AWS or GCP infrastructure experience including IAM, networking, compute, and troubleshooting.
• Strong scripting and automation skills using Python, Bash, Go, or similar technologies.
• Excellent technical writing, judgment, and prioritization skills.
• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent hands-on professional experience.
• ISO 27001 experience is highly valued, while SOC 2 experience is preferred.
• AI governance, infrastructure-as-code, identity and endpoint platforms, cloud security tooling, Kubernetes, or startup experience is valued.

Benefits

• Competitive salary and equity package reflecting experience and contribution.
• Significant ownership of a growing security and infrastructure function.
• Exposure to cloud infrastructure, security engineering, compliance, networking, identity, and AI governance.
• Opportunities for professional growth, career development, and increased responsibility.
• Collaborative environment focused on innovation, technical rigor, discipline, and continuous improvement.

Workplace

• Canada-based opportunity with remote work indicated in the source metadata.