Senior Site Reliability Engineer, Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Site Reliability Engineer, Security based in Canada. This role sits at the intersection of site reliability engineering, cloud infrastructure, distributed systems, and security. You’ll help operate and evolve production infrastructure supporting critical authorization services at scale. Your work will strengthen Kubernetes, cloud security, software supply chains, IAM, vulnerability management, and incident response. You’ll build automation, secure defaults, and platform guardrails that enable engineering teams to move quickly without compromising security. As a senior member of a small, highly technical team, you’ll have substantial ownership and influence across engineering. You’ll contribute to architecture, threat modeling, operational resilience, and security strategy while remaining hands-on technically. The environment is fully remote, collaborative, and designed for engineers who value autonomy, technical rigor, and meaningful impact. Accountabilities - Operate and evolve production Kubernetes and cloud infrastructure with a focus on availability, scalability, performance, reliability, and security. - Strengthen infrastructure security across Kubernetes, cloud platforms, networking, IAM, workload identity, secrets management, encryption, and service-to-service communication. - Secure the software supply chain from source code through production, including CI/CD pipelines, dependencies, container images, build artifacts, provenance, vulnerability scanning, and deployment controls. - Build automated security guardrails, policies, and secure defaults into the engineering platform to reduce reliance on manual security processes. - Improve vulnerability management practices by identifying, prioritizing, and addressing vulnerabilities across containers, dependencies, infrastructure, and cloud services according to exposure and risk.

- Expand security telemetry, logging, monitoring, alerting, and detection capabilities, while developing and exercising effective security incident-response procedures. - Participate in the SRE on-call rotation and lead or contribute to production incidents, using post-incident learnings to improve reliability and operational practices. - Partner with engineering teams on architecture and infrastructure decisions, threat modeling, and security considerations throughout the development lifecycle. - Automate operational and security processes wherever possible through strong software engineering practices and platform tooling. - Help shape security engineering strategy by contributing technical expertise to architecture decisions, engineering priorities, customer security requirements, and the broader security posture. - Provide technical leadership across engineering boundaries while maintaining a practical approach to security risk within real-world distributed systems. Requirements - Significant professional experience operating production systems as a Site Reliability Engineer, Platform Engineer, Infrastructure Engineer, Security Engineer, or in a closely related role. - Deep hands-on experience with Kubernetes and containerized production environments. - Strong experience with at least one major cloud provider, such as AWS, GCP, or Azure, including its security model. - Strong understanding of IAM, workload identity, networking, TLS/PKI, encryption, secrets management, and cloud-native security. - Experience with Infrastructure as Code; experience with Pulumi is relevant, while Terraform, AWS CDK, or equivalent tooling is also applicable. - Experience designing, operating, and securing CI/CD and software delivery pipelines. - Strong Linux and container security fundamentals. - Experience with observability, monitoring, logging, production operations, and incident response.