Find work in Canada.

593,455 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 7 mins ago
ST
Value Optimization Engineer
SEGULA Technologies
Windsor, ON
- Contract
SEGULA Technologies Canada is looking for a Value Optimization Engineer to support automotive engineering programs and identify innovative cost, weight, complexity, and value optimization…
Added 7 mins ago
AI
Senior Level 3 AI Engineer – Copilot, ChatGPT, Grok, Claude & Gemini
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Montreal, QC
- Full-time
We are seeking a Senior Level 3 AI Engineer to act as the first point of call for engineering issues across end user AI products - Microsoft Copilot, OpenAI ChatGPT, Anthropic Claude, Grok…
Added 8 mins ago
V
Engineer - Ground Control
Vale
Sudbury, ON · Greater Sudbury, ON,CA
- Full-time
We are currently seeking a Senior Engineer, Geomechanics to join the Vale Base Metals CTO Geotechnical Office’s Geomechanics Studies team based in Sudbury, Ontario, Canada. .
Added 22 mins ago
V
Architect
Virtusa
Toronto, ON
- Full-time
Job Summary: We are seeking a Senior QA Automation Engineer who plays a critical role in upholding the quality standards of our software delivery lifecycle. This position is responsible for…
Added 22 mins ago
FC
IT Field Specialist
Flatiron Construction Corp
Fredericton, NB
- Other
Are you a problem solver passionate about providing top-tier solutions? As an IT Field Specialist, you will provide second-level IT support to users based at a project site. Collaborate…
Added 22 mins ago
EG
Senior Municipal Engineer
Egis Group
Calgary, AB · Toronto, Ontario
- $130,000 to $170,000 CAD / year
- Full-time
Senior Municipal Engineer responsible for leading roadway and municipal infrastructure design initiatives within Canada. The role sits within a municipal engineering team supporting…
Added 22 mins ago
EG
Junior Highway Designer
Egis Group
Calgary, AB · North Bay, Ontario
- $50,000 to $70,000 CAD / year
- Full-time
Participate in site visits and field investigations to gather data and assess existing conditions.
Added 53 mins ago
BT
Director, Supply Chain
BlueRock Therapeutics
Toronto, ON
- Full-time
…platform, we direct cellular differentiation and genetically engineer cells to create transformative therapies for patients suffering from neurological and ophthalmological…
Added 1 hour ago
EI
Junior Highway Designer
Egis in Canada
Calgary, AB
- $50,000 to $70,000 CAD / year
- Full-time
Participate in site visits and field investigations to gather data and assess existing conditions.
Added 1 hour ago
EI
Senior Municipal Engineer
Egis in Canada
Calgary, AB
- $130,000 to $170,000 CAD / year
- Full-time
Senior Municipal Engineer responsible for leading roadway and municipal infrastructure design initiatives within Canada. The role sits within a municipal engineering team supporting…
Added 1 hour ago
C
Senior Advisor, Product Line Management, Maintenance & Managed Services
Ciena
Canada
- Full-time
Serve as the expert portfolio advisor for complex maintenance, managed-service and resident-engineer opportunities.
Added 1 hour ago
FA
Vice President, Quality Control
FTAI Aviation
Montreal, QC
- Full-time
Added 1 hour ago
X
Senior Geotechnical Applications Engineer
Xerxes
AB · Edmonton, AB
- Full-time
As a Senior Geotechnical Applications Engineer with Xerxes, you will be a key technical resource supporting the application, installation, and field performance of underground storage tank…
Added 1 hour ago
EE
Senior Piping Engineer
Equinox Engineering Ltd.
Calgary, AB
- Full-time
…early-stage concept development to detailed engineering and field…
Added 1 hour ago
P
Full Stack Engineer, Storefront
Pepper
Remote, Canada
- $149,000 to $164,000 CAD / year
- Full-time
- Remote
3+ years of professional full stack development experience, operating at the level of an engineer who independently owns features from design through deployment, with a Bachelor's or…
Added 1 hour ago
A
Co-op Student - Construction (Winter 2027)
AtkinsRéalis
Toronto, ON
- Full-time
This is a field position based at 415 Eastern Avenue, Toronto. This is not a hybrid position; the hours of work will mirror the hours of work by the Quality field staff. All PPE will be…
Added 1 hour ago
S
Senior Civil Engineer- Water
Stantec
Burnaby, BC
- Full-time
The role of the Senior Civil Engineer is to work on complex and exciting projects both independently and as a team member. In this position you could work as a technical engineer, project…
Added 1 hour ago
S
Senior Electrical Engineer- Water
Stantec
Calgary, AB
- Full-time
We are currently seeking a passionate Senior Electrical Engineer to join our project delivery team: The same team that is tasked with delivering some of the most interesting and iconic…
Added 1 hour ago
UO
Energy Conservation Engineer
University of British Columbia
Vancouver, BC · UBCV | Campus Energy Centre (CEC)
- $9,599.75 to $14,385.5 CAD / month
- Full-time
The role of the Energy Conservation Engineer is to create energy conservation measures for a profound reduction in energy consumption and equivalent greenhouse gas emissions from the UBC…
Added 2 hours ago
TS
Building Automation Systems (BAS) Engineer/Technician
TalentSphere Staffing Solutions
Toronto, ON
- Full-time
…BAS programming who enjoys troubleshooting, working in the field, and seeing projects through from installation and commissioning to ongoing service and…
Added 2 hours ago
GO
Water Control Systems Planning Engineer
Government of Manitoba
Winnipeg, MB
- Full-time
Reporting to the Senior Water Control System Planning Engineer, the Water Control System Planning Engineer is responsible for providing engineering services related to water management…
Added 2 hours ago
EE
Senior Piping Stress Engineer
Equinox Engineering Ltd.
Calgary, AB
- Full-time
…early-stage concept development through to detailed engineering and field…
Added 2 hours ago
E
Ingénieur.e Instrumentation et contrôle - Instrumentation & Control Engineer (I&C Engineer)
Excelpro
Montreal, QC
- Full-time
As an Engineer, your primary responsibility will be to deliver various automation projects for our clients. More specifically, you will:
Added 2 hours ago
Project Engineer - Transportation
City of Regina
Regina, SK
…design, and policy development. This position reports to a Senior Engineer in the Integrated Engineering Services…
Added 2 hours ago
LS
Intermediate Mechanical Engineer
Lauren Services
Calgary, AB
- Contract
We are seeking a highly motivated Intermediate Mechanical Engineer with strong experience in mechanical engineering and design, particularly within the midstream energy, industrial, or…

Calix

Staff Security Engineer - Calix Cloud

Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Nov 4, 2026

Original job description

The Calix platform enables Communication Service Providers (CSPs) of all sizes to transform and future-proof their businesses. Through real-time data, automation, and actionable insights delivered via Calix One  - our cloud-first, AI-powered platform - CSPs can simplify operations, collapse cost, and accelerate innovation. Calix One brings together the automation of everything and the experience of one, empowering customers to deliver differentiated subscriber experiences while driving acquisition, loyalty, and revenue growth. This is the Calix mission: to enable CSPs of all sizes to simplify, innovate, and grow, strengthening both their businesses and the communities they serve.

We’re at the forefront of a once in a generational change in the broadband industry. Join us as we innovate, help our customers reach their potential, and connect underserved communities with unrivaled digital experiences.

Calix is where passionate innovators come together with a shared mission: to reimagine broadband experiences and empower communities like never before. As a true pioneer in broadband technology, we ignite transformation by equipping service providers of all sizes with an unrivaled platform, state-of-the-art cloud technologies, and AI-driven solutions that redefine what’s possible. Every tool and breakthrough we offer is designed to simplify operations and unlock extraordinary subscriber experiences through innovation.

We’re looking for a Staff Security Engineer to define and strengthen the trust architecture connecting our devices, customers, and cloud platform. In this highly influential, hands-on role, you’ll serve as a senior technical authority across device identity, PKI, cloud and workload identity, secure device-to-cloud communications, and embedded security. You’ll partner across device, network, mobile, and cloud engineering teams to design resilient security architecture, pressure-test it through threat modeling and offensive testing, and drive solutions from design through production.

What You'll Do

Design and run our PKI on GCP: offline root, HSM-backed issuing CAs in Certificate Authority Service, certificate profiles, and key ceremonies.
Define device identity: unique keys in a secure element or TPM, factory provisioning, field enrollment (for example EST), rotation, revocation, and a tested plan for CA key compromise.
Architect workforce, workload and customer identity: SSO and Workforce Identity Federation, Workload Identity Federation instead of service account keys, and OAuth 2.0 and OIDC flows for apps and devices.
Secure the path from device to cloud: mutual TLS, per-device authorization, and protection against replay, cloned devices and fleet-wide denial of service.
Own security of the ingestion layer on GCP (self-operated MQTT brokers and gateways on GKE feeding Pub/Sub, Dataflow and BigQuery), since Cloud IoT Core was retired in 2023.
Secure remote commands and over-the-air updates so a compromised cloud account cannot push malicious firmware to the fleet.
Set on-device requirements: secure boot, signed and rollback-protected firmware, encrypted storage, locked debug ports, and a hardened OS image.
Test devices hands-on: firmware analysis, hardware and local-interface attacks (Bluetooth, Wi-Fi, USB, serial), and protocol fuzzing; secure the companion mobile apps.
Govern the firmware supply chain: SBOMs, vulnerability management, signing-key custody, and manufacturer and silicon-vendor assessments.
Build threat models for the full device, app, gateway and cloud system (STRIDE, attack trees, MITRE ATT&CK), and run pentests, red-team and purple-team exercises.
Set GCP guardrails: organization policy, VPC Service Controls, IAM, Cloud KMS, GKE hardening, Binary Authorization, and secure CI/CD and data pipelines (BigQuery, Dataflow, Datastream, Kafka).
Map controls to ISO 27001, SOC 2, NIST CSF, CIS Controls, ETSI EN 303 645, NIST IR 8259, GSMA baseline controls and FCC CPNI rules.
Be the escalation point for hard security decisions and incidents, mentor senior engineers, and brief executives.

Required Qualifications

BS or MS in computer science, information security or cryptography, or equivalent experience.
10+ years in security engineering, with deep ownership of at least two of: PKI, identity and access, device security, or cloud security architecture.
PKI depth: X.509 profiles, CA hierarchy design, HSM and key management, certificate lifecycle automation, revocation at scale, and protocols such as EST, SCEP and ACME. Experience with GCP Certificate Authority Service or a comparable managed CA.
Identity depth: OAuth 2.0, OIDC, SAML, SSO and federation; running or integrating an enterprise IdP; designing token and session security for apps and devices.
Strong GCP security experience: IAM, Workload Identity Federation, Cloud KMS, VPC Service Controls, GKE and container security, Security Command Center, and securing data pipelines (BigQuery, Dataflow, Datastream, Kafka).
Applied knowledge of secure device-to-cloud communication: mutual TLS, MQTT and gRPC security, broker and gateway hardening, and OTA update integrity.
Hands-on device and embedded security skills: secure boot, TPM or secure element use, firmware analysis, hardware debug interfaces, and mobile app security on Android and iOS.
Hands-on offensive skills and the ability to threat-model a full device-to-cloud system; you write tooling in Python, Go or similar.
Experience with CI/CD and DevSecOps security, and with ISO 27001, SOC 2, NIST CSF and CIS Controls.
A record of influencing architecture across multiple teams, with clear writing and briefing skills.

Why Join Us?

Be part of a team driving AI innovation in telecom and cloud solutions.
Opportunity to work on cutting-edge projects impacting millions of users.
Collaborative culture with continuous learning and growth.
Competitive Benefits and Vacation package.

The base pay range for this position varies based on the geographic location. More information about the pay range specific to candidate location and other factors will be shared during the recruitment process. Individual pay is determined based on location of residence and multiple factors, including job-related knowledge, skills and experience.

San Francisco Bay Area

156,400 - 265,700 USD Annual

All Other US Locations:

136,000 - 231,000 USD Annual

As a part of the total compensation package, this role may be eligible for a bonus. For information on our benefits click here.

Apply About employer

More about this job

Responsibilities

Design and operate security architecture spanning PKI, device and workload identity, secure device-to-cloud communications, embedded devices, and GCP infrastructure. Lead threat modeling and offensive testing, secure firmware and data pipelines, establish compliance controls, and advise teams and executives on security decisions and incidents.

Requirements

Requires 10+ years of security engineering experience and deep ownership in at least two areas among PKI, identity and access, device security, and cloud security architecture. Candidates should bring strong GCP, identity, embedded and offensive security expertise, experience with security frameworks and DevSecOps, and the ability to influence architecture across teams; a bachelor's or master's degree in a relevant field or equivalent experience is required.

Skills

Public Key Infrastructure
Identity and Access Management
Google Cloud Platform Security
Device and Embedded Security
Cloud Security Architecture
OAuth 2.0 and OpenID Connect
Mutual TLS
Threat Modeling
Penetration Testing
Firmware Security
Secure Boot
Mobile Application Security
DevSecOps
Python or Go
Security Architecture Leadership

Benefits

Competitive Benefits
Vacation Package
Bonus Eligibility

Visa sponsorship

Not detected in the job text

Keywords

Google Cloud Platform
Public Key Infrastructure
X.509
Certificate Authority Service
Hardware Security Module
OAuth 2.0
OpenID Connect
SAML
Workforce Identity Federation
Workload Identity Federation
Cloud KMS
VPC Service Controls
Google Kubernetes Engine
Mutual TLS
MQTT
gRPC
Secure Boot
Trusted Platform Module
Secure Element
Over-The-Air Updates
Firmware Analysis
Software Bill of Materials
STRIDE
MITRE ATT&CK
Binary Authorization
BigQuery
Dataflow
Datastream
Kafka
ISO 27001

Report this job