Sr Security Platform Engineer
Sun Life Financial2 days ago
Toronto, CanadaSenior
Responsibilities
- Operate, maintain, and enhance enterprise cryptographic security platforms, particularly ISG Crypto Vulnerability Scanner and CyberArk Machine Identity Security.
- Design and implement automation and integration solutions to improve platform scalability, efficiency, and security outcomes.
- Deploy and support security technologies, lead enterprise security initiatives and projects, and perform proofs of concept for new technologies.
- Implement risk-driven security controls, provide security subject-matter expertise during audits, and recommend strategies for identified business risks.
- Investigate and respond to security incidents, participate in 24x7 on-call rotations, and support major incident management calls.
- Manage the capacity, resiliency, and operationalization of security systems protecting internal and client data.
- Collaborate with security peers, vendors, infrastructure, architecture, operations, and application development teams.
- Develop and maintain RACI documentation, product documentation, cyber security playbooks, policies, and knowledge base articles.
- Use Jira and Confluence to estimate, track, complete, and manage project stories and assignments.
Requirements
- 5–7 years of information security and engineering experience with enterprise security technologies, including cryptography and machine identity security.
- At least 3 years of experience leading global information security projects and managing third-party security service providers.
- Strong infrastructure and DevOps foundation including Linux, Windows, Active Directory, SSO, authentication and authorization protocols, AWS, Azure, databases, Splunk, ServiceNow, and Jira.
- Expertise with CyberArk Machine Identity Security/Venafi, ISG Crypto Vulnerability Scanner, HashiCorp Vault, enterprise PKI, SSL/TLS certificate lifecycle management, and machine identity security.
- Experience with AWS, Kubernetes, OpenShift, and EKS, as well as security operations including incident response, detection engineering, endpoint security, intrusion detection, and email security.
- Knowledge of networking technologies, load balancers, firewalls, web application firewalls, and intrusion detection and prevention systems.
- Understanding of information security principles, industry standards, security controls, risk management frameworks including NIST and ISO 2700x, and vulnerability remediation.
- Experience deploying enterprise technologies using Scrum or Kanban methodologies.
- Bachelor’s degree, college diploma, or equivalent work experience in a related discipline.
- Preferred certifications include CISSP, CCSP, GIAC, CompTIA, and CCNP Security or equivalent.
- Strong communication, investigative, analytical, problem-solving, ownership, urgency, and strategic technology-maturity skills.
Benefits
- Competitive salary and bonus program based on market scale.
- Flexible group insurance program beginning on the first day of work.
- Share Ownership Program with employer matching contributions.
- Hybrid work arrangement allowing employees to work from the office and virtually based on business, client, and employee needs.
- Sun Life was included in Great Place to Work’s 2026 list of Canada’s Best Workplaces.
Tech Stack
Categories
About Sun Life Financial
Sun Life Financial provides life and health insurance, group benefits, retirement solutions, and asset management services for individuals, employers, and institutional investors. It generates revenue from insurance premiums and investment management fees, including through MFS Investment Management and SLC Management. Founded in 1865 and headquartered in Toronto, Canada, Sun Life operates across North America and Asia, and its shares trade on the TSX and NYSE under the symbol SLF.