Back to results

DevOps and Security Engineer

  • Ottawa, ON, Canada
  • Greater Ottawa Metropolitan Area, Canada

Full-time

Applications open in a new tab.

Job details

Job type
Full-time
Apply by
Posting language
English
Posted

Original job description

As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments.

This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.

This is an Ottawa based hybrid role and you must reside in Ottawa at the time of hire.

Key Responsibilities

Build, test automation, release, and deployment 

  • Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery
  • Maintain infrastructure as code & keep dev & production environments consistent
  • Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs
  • Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review
  • Help teams scale automated UI and regression testing (e.g. Playwright), so testing capacity grows with output. 
  • Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging
  • Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects

Production monitoring and reliability 

  • Run monitoring, alerting, & incident response for production services
  • Lead root cause analysis & lessons learned after customer-impacting events
  • Track & improve deployment frequency, change failure rate, & mean time to recovery

Hosting and network security 

  • Secure cloud hosting, with AWS and Azure including
  • identity and access, secrets
  • management, network segmentation, firewall
  • and WAF rules, TLS, backups, and hardening
  • Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling
  • Secrets handling, least-privilege access, safe processing of data
  • Monitor services with OpenTelemetry, & track usage and cost
  • Review network security configuration on a regular schedule & fix drift
  • Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docker, & cloud-init deployments, nginx, & scheduled jobs
  • Experience operating LLM or AI agent workloads, AWS Bedrock,
  • AgentCore, cost monitoring & guardrails
  • Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate
  • Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
  • Serve on the incident response team & the 24-hour on-call rotation

Required Qualifications 

  • 5+ years in DevOps, site reliability, or platform engineering
  • Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software
  • Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM, nginx, kubernetes)
  • Working knowledge of vulnerability management: code, dependency, and container scanning (e.g.,
  • Trivy, Dependabot), triage, and remediation, including risk-based prioritization (e.g. severity scoring combined with exploitability data)
  • Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN, least-privilege access
  • Production monitoring, on-call, incident response, and root cause analysis experience
  • Scripting and automation in Python, Bash, or PowerShell
  • Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001

About Martello

We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.

Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.

More about this job

Responsibilities

Own CI/CD pipelines, infrastructure, releases, production monitoring, and incident response across cloud-hosted and on-premises products. Secure AWS and Azure environments, manage vulnerability remediation, and provide technical evidence for compliance and customer security requirements.

Requirements

Requires at least five years of DevOps, site reliability, or platform engineering experience, including hands-on CI/CD, containers, infrastructure as code, and production AWS security. Candidates should also have experience with vulnerability management, network security, monitoring, incident response, and scripting in Python, Bash, or PowerShell.

Skills

  • CI/CD
  • Infrastructure As Code
  • AWS
  • Azure
  • Kubernetes
  • Terraform
  • Docker
  • Vulnerability Management
  • Network Security
  • Incident Response
  • Production Monitoring
  • Python
  • Bash
  • PowerShell
  • Identity And Access Management
  • Automated Testing

Visa sponsorship

Not detected in the job text

Categories

  • Technology
  • Software
  • Security & Safety
  • Engineering

Keywords

  • GitHub Actions
  • AWS
  • Azure
  • Terraform
  • Kubernetes
  • Docker
  • Cloud-Init
  • Nginx
  • Keycloak
  • OAuth
  • OpenID Connect
  • JWT
  • OpenTelemetry
  • AWS Bedrock
  • AgentCore
  • Playwright
  • Trivy
  • Dependabot
  • Software Bill Of Materials
  • Vulnerability Scanning
  • Secrets Management
  • Web Application Firewall
  • TLS
  • Network Segmentation
  • CI/CD
  • Infrastructure As Code
  • Incident Response
  • Root Cause Analysis
  • EU Cyber Resilience Act
  • SOC 2

Report this job