Sr Security Platform Engineer
Sun Life Financial1 month ago
Toronto, CanadaSenior
Responsibilities
- Operate, maintain, and enhance enterprise cryptographic security platforms, particularly ISG Crypto Vulnerability Scanner and CyberArk Machine Identity Security (Venafi).
- Design and implement automation and integration solutions to improve platform scalability, efficiency, and security outcomes.
- Deploy, support, and maintain security technologies and lead security initiatives, enterprise projects, and technology proofs of concept.
- Implement risk-driven security controls, provide subject matter expertise during audits, and identify and remediate business security risks.
- Investigate and respond to security incidents, participate in 24x7 on-call support, and provide consultation during major incidents.
- Manage security-system capacity and resiliency while supporting platforms that protect internal and client data.
- Collaborate with infrastructure, architecture, operations, application development, security peers, vendors, and other teams.
- Use Jira and Confluence to estimate stories, define completion criteria, and track project work.
- Operationalize projects by developing RACI documentation, product documentation, training, playbooks, policies, and knowledge-base articles.
- Support incident management and CSIRT processes and manage transitions to business-as-usual operations.
Requirements
- 5–7 years of information security and engineering experience with enterprise security technologies, including cryptography and machine identity security.
- At least 3 years of experience leading global information security projects and managing third-party security service providers.
- Strong infrastructure and DevOps foundation across Linux, Windows, Active Directory, SSO, authentication and authorization protocols, AWS, Azure, databases, Splunk, ServiceNow, and Jira.
- Expertise with CyberArk Machine Identity Security (Venafi), ISG Crypto Vulnerability Scanner, HashiCorp Vault, enterprise PKI, SSL/TLS certificate lifecycle management, and machine identity security.
- Experience with cloud and container technologies including AWS, Kubernetes, OpenShift, and EKS.
- Experience with incident response, detection engineering, endpoint security, intrusion detection, and email security technologies.
- Knowledge of networking technologies, load balancers, firewalls, web application firewalls, and intrusion detection and prevention systems.
- Knowledge of information security principles, industry standards, security controls, risk management frameworks such as NIST and ISO 2700x, and vulnerability remediation.
- Experience deploying enterprise technologies using Scrum and Kanban methodologies.
- Bachelor’s degree, college diploma, or equivalent work experience in a related discipline.
- Strong investigative, analytical, problem-solving, oral communication, and written communication skills.
- Preferred certifications include CISSP, CCSP, GIAC, CompTIA, and CCNP Security or equivalent.
Benefits
- Competitive salary and bonus program based on market scale.
- Flexible group insurance program beginning on the first day of work.
- Share Ownership Program with employer matching contributions.
- Hybrid work arrangement offering flexibility to work from the office and virtually based on business and client needs.
- The posting ends October 15, 2026.
Tech Stack
Categories
About Sun Life Financial
Sun Life Financial provides life and health insurance, group benefits, retirement solutions, and asset management services for individuals, employers, and institutional investors. It generates revenue from insurance premiums and investment management fees, including through MFS Investment Management and SLC Management. Founded in 1865 and headquartered in Toronto, Canada, Sun Life operates across North America and Asia, and its shares trade on the TSX and NYSE under the symbol SLF.