Find work in Canada.

317,591 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 2 days ago
P
DevSecOps Specialist
Procom
Toronto, ON
- Contract
The main function of a DevSecOps Specialist is to conceive and write detailed software implementations/code while ensuring that their code/configurations adhere to the security, logging,…
Added 3 days ago
A
Développeur Java - Expert
Astek
Montreal, QC · Greater Montreal Metropolitan Area
- Contract
…processus. Tu travailleras dans un environnement orienté API, DevSecOps et innovation, où l’utilisation d’agents IA fait partie intégrante des pratiques de conception et de…
Added 3 days ago
IC
Infrastructure and Platform Enablement, Lead
Interac Corp.
Toronto, ON · Interac Corp. Head Office
- Full-time
…remain accountable for technical design, engineering standards, specialist estimates, implementation and operational…
Added 3 days ago
PG
Cloud Security Engineer
Paymentus Group Inc
Richmond Hill, ON
- Full-time
Added 4 days ago
Senior Vulnerability Management Analyst
BRP
Montreal, QC
We are looking for a Senior Vulnerability Management Specialist responsible for leading the identification, assessment, prioritization, reporting, and remediation oversight of cybersecurity…
Added 4 days ago
OI
DevSecOps Specialist
OXARO Inc.
Canada
- Contract
7+ years of experience implementing and supporting DevSecOps and CI/CD practices, including source code version control, artifact repository management, automated build processes, and…
Added 4 days ago
KI
IT Cloud Cybersecurity Specialist
Kruger Inc.
Montreal, QC
- Full-time
The IT Cloud Cybersecurity Specialist defines, implements, and continuously improves security controls across Microsoft 365, Azure, identity, data protection, SaaS integrations, cloud data…
Added 5 days ago
M
DevOps Specialist
Manulife
Toronto, ON
- Full-time
Added 6 days ago
OI
DevSecOps Specialist
OXARO Inc.
Ottawa, ON
- Contract
7+ years of experience implementing and supporting DevSecOps and CI/CD practices, including source code version control, artifact repository management, automated build processes, and…
Added 9 days ago
S
DevSecOps Specialist
Systematix
Ottawa, ON
- Contract
We are Systematix and we are currently seeking a DevSecOps Specialist for an opportunity with a public sector client. The ideal candidate must hold an active Government of Canada Secret…
Added 11 days ago
Senior Information Security Specialist II
Bell
Toronto, ON
The DevSecOps team (focused on planning, designing, deploying and supporting the optimization of security operations functions) is looking for a motivated technical/engineering…
Added 12 days ago
M
Sr MTS - QA Audit
MDA
Richmond, BC
- Full-time
Assist the Process Specialist with business‑process change management.
Added 13 days ago
PL
Development Security Specialist (Industrial Oil & Gas Applications)
Pengcorp Ltd.
Calgary, AB
- Full-time
Role: Development Security Specialist (DevSecOps)
Added 13 days ago
FN
Assistant Vice President, Information Security
First National Financial LP
Toronto, ON · East York, ON
- Full-time
Added 13 days ago
Staff DevSecOps Specialist
AlayaCare
Montreal, QC
Extensive hands-on experience in DevSecOps, cloud security engineering, or platform and SRE work with deep security ownership, at staff or principal level of technical scope, with a track…
Added 16 days ago
Principal Application Security Specialist
Global Relay
Vancouver, BC
The Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function. Combining deep application security…
Added 16 days ago
GR
Principal Application Security Specialist
Global Relay
Vancouver, BC
- Full-time
The Principal Application Security Specialist is the most senior individual contributor across Global Relay's Software & Application Security function. Combining deep application security…
Added 17 days ago
CO
Platform Engineer
Caspian One
Toronto, ON
- $80 to $110 CAD / hour
- Contract
Our client is building a specialist Platform Engineering team responsible for creating the reusable
Added 17 days ago
C
Senior Platform Engineering Specialist
CANARIE
Ottawa, ON
- Full-time
The Position: Senior Platform Engineering Specialist
Added 18 days ago
AB
Security & AI DevSecOps Expert (Hybrid)
Ateko, backed by Bell Canada
Toronto, ON
- Contract
We are looking for a highly hands-on Application Security Expert who combines the skills of a Security Architect and a DevSecOps Specialist. This individual will play a key role in…
Added 19 days ago
MS
API Security Engineering Lead (Hybrid)
Morgan Stanley
Montreal, QC
- Full-time
…level, which is part of the job family responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and…
Added 20 days ago
F
Cloud Security Specialist
Fortinet
Burnaby, BC
- Full-time
The Fortinet Team is looking for a Cloud Security Specialist to join the Information Security team within our R&D organization. This is a highly technical, hands-on role, working directly…
Added 26 days ago
IC
Application Security, Senior Specialist
Interac Corp.
Toronto, ON · Interac Corp. Head Office
- Full-time
The Application Security, Senior Specialist will play a critical role in safeguarding our ecosystem by ensuring that our applications are designed, built, and deployed securely. You will…
Added 1 month ago
MI
Cloud & DevOps Specialist
Montrium Inc
Montreal, QC
- Full-time
Join Montrium as a Cloud & DevOps Specialist and help operate, automate, and continuously improve the cloud capabilities that support our established Connect platform. In this role, you…
Added 1 month ago
JG
DevOps Engineer
J&M Group
Toronto, ON
- Contract
Platform Engineer / Platform Engineering / DevOps Specialist Assisting in test environment build, support & issue resolution Providing detailed technical design Build & code deployment…

AlayaCare

Staff DevSecOps Specialist

Montreal, QC, Canada

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Sep 21, 2026

Original job description

About AlayaCare

At AlayaCare, we’re more than just a fast-growing SaaS company, we’re a team of people passionate about transforming home healthcare. Our cloud-based platform empowers care providers around the world to deliver better outcomes for their clients.

With 550+ employees across Canada, the US, Australia, and Brazil, we’re united by a shared mission and a strong culture of transparency, growth, and human connection. Whether you're early in your career or a seasoned expert, AlayaCare offers the opportunity to grow your impact, your skills, and your career.

About the Role

We are seeking a Staff DevSecOps Specialist to join our Security team. Reporting to the Director, Information Security and Privacy, The Staff DevSecOps Specialist is a senior individual-contributor role driving the technical direction of AlayaCare’s security vaning practice. It is a builder's role at the level where the thing being built is not only tooling but the technical standards and architecture other engineers design against, from our cloud and platform controls to the review practices those designs pass through and the automation that lets a small team protect a large surface.

As a member of AlayaCare's Information Security & Privacy team, you will drive the technical direction of how security is engineered across Site Reliability Engineering, Developer Experience, and platform teams, and carry it through in code. You will own the architecture and operation of our edge security on Cloudflare, lead the Wiz cloud security program across our AWS and Kubernetes estate, define how security is enforced in CI/CD alongside DevX, build the security tooling and detections the rest of the organization runs on, and secure the agents and agentic pipelines our developers are shipping.

You will lead through design, code, and influence rather than through reporting lines: the technical direction you shape is the direction you build. It is a rare scope for an individual contributor, spanning healthcare data, SOC 2, HIPAA, and Canadian privacy obligations across a platform where one engineer's work is visible everywhere.

What You’ll Do

Contribute to defining the multi-year technical roadmap for security engineering at AlayaCare, and personally build its most difficult components: the security tooling, services, and automation the organization depends on, and the engineering standards and review practices for security-owned code.
Own the architecture and operation of Cloudflare edge security: WAF rule strategy, custom rules, rate limiting, bot management, and DDoS posture, tuned against real production traffic with SRE and product teams.
Own cloud and container security architecture with SRE, and the Wiz program that verifies it: AWS identity boundaries, network segmentation, secrets management and encryption patterns; Kubernetes cluster hardening, admission control, image supply chain and runtime posture; and prioritized remediation and posture metrics across AWS accounts.
Establish preventive guardrails in code: policy-as-code in Terraform and CI so entire classes of misconfiguration become impossible rather than detected, and, with Developer Experience, CI/CD security testing (SAST, SCA, secrets, container scanning) enforced at a signal-to-noise bar developers accept.
Own the vulnerability management program as a system: intake across all sources, exploitability-based prioritization, SLAs, automation of the toil, and reporting to engineering and executive stakeholders.
Lead detection engineering in support of the SOC, including detection-as-code practices and log source onboarding, and serve as senior technical lead during security incidents affecting cloud and application infrastructure, owning the engineering follow-through that prevents recurrence.
Lead threat modelling and security design reviews for major architectural changes, and serve as the technical escalation point within security engineering for complex design and implementation decisions.
Secure how AlayaCare builds with AI: threat model the agents, agentic workflows, and pipelines our developers ship; set guardrails for tool use, non-human identity, secrets, and data access; and define the review standards those systems are designed against.
Build the technical control automation that makes SOC 2, HIPAA, and customer assurance continuous, partnering with GRC so evidence is a by-product of how systems run.
Mentor and level up engineers inside and outside the security team, growing the practice beyond what one person can operate, and represent our security engineering approach to customers and auditors when technical depth is required.

What You Bring to the Team

Bachelor’s or advanced degree in Computer Science, Cybersecurity, Software Engineering, Computer Engineering, Information Technology, or a related technical field.
Extensive hands-on experience in DevSecOps, cloud security engineering, or platform and SRE work with deep security ownership, at staff or principal level of technical scope, with a track record of setting technical direction and delivering it rather than advising on it.
Deep expertise securing AWS at scale: IAM, VPC networking, KMS, organizational controls, and the trade-offs between them.
Deep command of container and Kubernetes security, evidenced by production clusters you have hardened and kept hardened as they grew.
Production experience owning a WAF and edge security platform, ideally Cloudflare, including rule strategy and managing false positives on live customer traffic.
Strong software engineering ability in Python, Go, or a comparable language, with production systems other teams rely on and the judgment to set the quality bar for them.
Deep hands-on Terraform experience, including module design and review at scale, and policy-as-code approaches to preventive controls.
Experience designing CI/CD security enforcement that developers adopt rather than route around.
Strong application security fundamentals: OWASP Top 10, secure design, threat modelling, and secure code review at architectural depth.
Detection engineering experience with a modern SIEM (Panther, Splunk, or similar) and experience leading incident response in cloud environments.
Fluency working AI-natively: builds agents and agentic automation as a matter of course in their own engineering, with clear judgment about how these systems fail and what that means for security.
Ability to reason about real risk rather than scanner severity, and to defend that reasoning to engineers, executives, and auditors.
Demonstrated ability to lead and influence across an engineering organization without direct authority, and to mentor senior engineers.
Experience in healthcare, home health, or medical devices is an asset.
Bilingual in French and English

Why Join AlayaCare?

Work With Purpose

At AlayaCare, you’ll help build technology that empowers care providers and improves outcomes for patients and families. Every line of code and every customer interaction contributes to making care more connected, accessible, and human.

Grow in a High-Trust Culture

We believe in transparency, feedback, and assuming positive intent. Here, you’ll feel safe to share your ideas and career goals, and be supported to achieve them through mentorship, career mobility, and a promote-from-within philosophy.

Balance That Works for You

We value flexibility and well-being. From “Wellness Fridays” to volunteer time off, to flexible vacation, we make sure you have the space to recharge, contribute to your community, and live your best life.

Benefits That Matter

Equity in a well-funded, scaling company.
Comprehensive health benefits, telemedicine, and lifestyle spending accounts.
Parental leave top-up and family support programs.

Inclusive by Design

We celebrate diverse perspectives and foster belonging through our DEIB initiatives. Employee-led events, summits, and social activities, both in-person and virtual, create meaningful connections across our global teams.

Location and Work Model

This role is based in Montreal. At AlayaCare, our hybrid model includes 2 set in-office collaboration days/week, and it is expected that team members are present in the office on those days to foster connection, innovation, and teamwork.

Ready to Join Us?

Apply today and be part of a company that makes a real difference in the future of home and community care. Not the right role for you? Share this posting with someone who might be a great fit.

AlayaCare uses AI tools during our hiring process to support fair, consistent, and objective decision-making. Some initial screening steps may be automated to help identify qualified candidates. If your application is declined automatically, you may request a human review.

We’re committed to creating a workplace where everyone belongs. If you require accommodation during the application process, please reach out to careers@alayacare.com.

Apply About employer

More about this job

Responsibilities

The Staff DevSecOps Specialist will drive the technical direction of security engineering, building critical security tooling, automation, and architectural standards. They will own edge security, cloud and container security programs, and lead threat modeling and incident response efforts.

Requirements

Candidates must have extensive hands-on experience in DevSecOps or cloud security engineering at a staff or principal level, with deep expertise in AWS and Kubernetes. Strong software engineering skills in Python or Go, along with experience in Terraform and CI/CD security enforcement, are required.

Skills

DevSecOps
Cloud security
AWS
Kubernetes
Cloudflare
Python
Go
Terraform
CI/CD
WAF
Threat modeling
Detection engineering
Identity and access management
Vulnerability management
Security architecture
Policy-as-code

Benefits

Equity
Comprehensive health benefits
Telemedicine
Lifestyle spending accounts
Parental leave top-up
Family support programs
Wellness Fridays
Volunteer time off
Flexible vacation

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Cloud Security
AWS
Kubernetes
Cloudflare
Python
Go
Terraform
CI/CD
WAF
Threat Modeling
Detection Engineering
IAM
Vulnerability Management
Security Architecture
Policy-as-code
SaaS
Healthcare
SOC 2
HIPAA
SAST
SCA
Container Security
Edge Security
Incident Response
AI
Agentic Workflows
GRC
Automation
Security Engineering

Report this job