← All jobs
Senior DevSecOps & Cloud Security Engineer (PL7326)
"Toronto", Ontario, Canada · Remote · contract
Apply well, not just fast
Create a free account and upload your resume to get a match score, keyword gaps, a tailored resume, a cover letter and interview prep for this job.
About the role
CI/CDCloud SecurityObservabilityIncident ResponseQuality AssuranceTest Automation
Paralucent is seeking a Senior DevSecOps & Cloud Security Engineer to build secure delivery pipelines and operational controls for a regulated enterprise platform. You will embed security, reliability and evidence into infrastructure, CI/CD, identity, observability, vulnerability management, backup, recovery and production readiness.
You will work closely with architects, developers, QA and enterprise control teams.
What You'll Do
- Design and implement infrastructure-as-code, environment provisioning and secure CI/CD pipelines.
- Embed code, dependency, container, infrastructure and secrets scanning into delivery workflows.
- Implement identity and access controls, service identities, least privilege, segregation of duties and privileged-access safeguards.
- Configure secure networking, encryption, key/secrets management, logging, monitoring, alerting and audit evidence.
- Define vulnerability-management, patching, remediation and penetration-testing support processes.
- Implement backup, restore, resilience, disaster-recovery and recovery-test automation aligned to approved RTO/RPO objectives.
- Support privacy/data-residency controls, records retention, data lifecycle and secure destruction.
- Create operational dashboards, SLOs/alerts, incident runbooks and production-readiness evidence.
- Partner with enterprise cyber, privacy, architecture, risk and audit stakeholders.
- Support release, cutover, hypercare, incident response and root-cause analysis.
What Success Looks Like
- Environments are reproducible, secure and consistently deployed through automation.
- Security checks operate early in CI/CD and material findings are resolved before production.
- Access, secrets and audit evidence meet approved control requirements.
- Monitoring detects meaningful failures and runbooks support rapid diagnosis and recovery.
- Backup and disaster-recovery capabilities are tested and evidenced, not merely documented.