hirq
← All jobs

Paralucent

Senior DevSecOps & Cloud Security Engineer (PL7326)

"Toronto", Ontario, Canada · Remote · contract

Apply well, not just fast

Create a free account and upload your resume to get a match score, keyword gaps, a tailored resume, a cover letter and interview prep for this job.

About the role

CI/CDCloud SecurityObservabilityIncident ResponseQuality AssuranceTest Automation
Paralucent is seeking a Senior DevSecOps & Cloud Security Engineer to build secure delivery pipelines and operational controls for a regulated enterprise platform. You will embed security, reliability and evidence into infrastructure, CI/CD, identity, observability, vulnerability management, backup, recovery and production readiness. You will work closely with architects, developers, QA and enterprise control teams. What You'll Do - Design and implement infrastructure-as-code, environment provisioning and secure CI/CD pipelines. - Embed code, dependency, container, infrastructure and secrets scanning into delivery workflows. - Implement identity and access controls, service identities, least privilege, segregation of duties and privileged-access safeguards. - Configure secure networking, encryption, key/secrets management, logging, monitoring, alerting and audit evidence. - Define vulnerability-management, patching, remediation and penetration-testing support processes. - Implement backup, restore, resilience, disaster-recovery and recovery-test automation aligned to approved RTO/RPO objectives. - Support privacy/data-residency controls, records retention, data lifecycle and secure destruction. - Create operational dashboards, SLOs/alerts, incident runbooks and production-readiness evidence. - Partner with enterprise cyber, privacy, architecture, risk and audit stakeholders. - Support release, cutover, hypercare, incident response and root-cause analysis. What Success Looks Like - Environments are reproducible, secure and consistently deployed through automation. - Security checks operate early in CI/CD and material findings are resolved before production. - Access, secrets and audit evidence meet approved control requirements. - Monitoring detects meaningful failures and runbooks support rapid diagnosis and recovery. - Backup and disaster-recovery capabilities are tested and evidenced, not merely documented.