1 day ago
Toronto, CanadaSenior
Base Salary
$80k - $90k/yr
Responsibilities
- Architect and maintain secure, scalable, multi-cloud and cloud-native environments.
- Embed security controls into CI/CD pipelines and infrastructure-provisioning workflows.
- Develop infrastructure as code with Terraform and configuration automation with Ansible.
- Implement IAM, encryption, secrets management, logging, cloud governance, and AWS security controls.
- Manage cloud-native deployments using Docker, Kubernetes, Jenkins, and Azure DevOps.
- Design high-availability, blue-green deployment, rollback, and disaster-recovery strategies.
- Build monitoring, alerting, and observability solutions using CloudWatch, Datadog, ELK, Splunk, or comparable platforms.
- Conduct vulnerability assessments, patch management, server hardening, and security remediation.
- Perform threat modeling, security architecture reviews, attack-surface analysis, and risk assessments.
- Support incident triage, log correlation, root-cause analysis, escalation, and response playbooks.
- Implement controls aligned with PCI DSS, SOC 2, ISO 27001, and CIS benchmarks.
- Support SRE practices for availability, scalability, performance, and operational excellence.
- Maintain technical documentation, standard operating procedures, and security playbooks.
Requirements
- At least 6 years of experience.
- Strong AWS experience and working knowledge of Azure or GCP.
- Hands-on experience with Terraform, Ansible, Docker, Kubernetes, Jenkins, and Azure DevOps.
- Experience with AWS IAM, VPC, EC2, EKS, ECS, S3, CloudWatch, AWS Config, KMS, WAF, and load-balancing services.
- Experience with cloud security, IAM governance, network security, encryption, secrets management, infrastructure as code, and automated CI/CD pipelines.
- Experience with SIEM, vulnerability management, security scanning, incident response, monitoring, and observability tools.
- Scripting skills using Python, Bash, or PowerShell.
- Knowledge of SAST, DAST, EDR, NDR, PAM, Active Directory, and firewall controls.
- Understanding of SRE, high availability, resilient systems, and production reliability.
- Familiarity with PCI DSS, SOC 2, ISO 27001, and CIS security and compliance frameworks.
- Preferred experience with GuardDuty, Security Hub, CloudTrail, Wazuh, Snowflake, SaaS platform operations, Kafka, RabbitMQ, Redis, PostgreSQL, MySQL, or Oracle.
- Preferred knowledge of MITRE ATT&CK, MITRE ATLAS, OWASP guidance for AI or LLM applications, AI platform security, adversarial security testing, and GitHub Copilot or AI-enabled development tooling.
Benefits
- Paid time off, including 12–25 vacation days depending on employee grade, company-paid holidays, personal days, and sick leave.
- Medical, dental, and vision coverage, or provincial healthcare coordination in Canada.
- Retirement savings plans such as 401(k) in the U.S. or RRSP in Canada.
- Life and disability insurance.
- Employee assistance programs and other benefits based on local policy and eligibility.
- Regular, full-time employees receive a comprehensive benefits package; benefits vary by location and eligibility.
Tech Stack
AnsibleApache KafkaAWSAzureBashDatadogDockerGoogle Cloud PlatformJenkinsKubernetesMySQLPostgreSQLPowerShellPythonRabbitMQRedisSnowflakeSplunkTerraform
About Capgemini
Capgemini is a global IT services and consulting firm that delivers strategy, cloud, AI, software engineering, and managed services to large enterprises and public-sector clients. Founded in 1967 and headquartered in Paris, it is publicly traded on Euronext Paris and operates in 50+ countries. The group expanded its engineering capabilities by acquiring Altran in 2020, now operating as Capgemini Engineering.