Find work in Canada.

317,341 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 1 month ago
Product Cybersecurity Expert
Sonova AG
Kitchener, ON
…supporting secure design, threat modeling, vulnerability management, DevSecOps integration, and regulatory evidence for connected medical devices while collaborating across global R&D,…
Added 3 months ago
DevOps Developer
Octasic
Montreal, Quebec
The DevOps Developer is responsible for bridging the gap between software development and IT operations by automating, optimizing, and securing the software delivery lifecycle. This role…
Added 4 months ago
AG
Senior Technical Architect - DevSecOps & IT Service Delivery (Defence / NC2SS)
ADGA Group Consultants Inc
Ottawa, Ontario
- $130,000 to $150,000 CAD / year
- Full-time
We are seeking an experienced Technical Architect to support the Command Management & Security (CM&Sec) function within a high-security defence environment. This role will be responsible…
Added 1 month ago
MS
Senior Software Security Engineer
Motorola Solutions
Vancouver, BC · Quebec, QC · AB · BC · ON
- Full-time
The Avigilon security team, which you will be a key member of, is responsible for maintaining and implementing security controls for all confidential and intellectual property data across…
Added 23 days ago
Cryptography Engineer
Capco
Toronto, ON
3+ years of experience in Security Engineering, DevSecOps, SRE, Infrastructure Engineering, or Software Engineering with a strong focus on automation and security.
Added 3 months ago
VC
DevOps Specialist
Vancouver Coastal Health
Vancouver, British Columbia
- $46.39 to $66.68 CAD / hour
- Full-time
Demonstrated understanding of DevSecOps practices.
Added 3 months ago
Devops Engineer
Levio
Mississauga, Ontario · Toronto, Ontario
Proficiency in GitHub and GitHub Actions (CI/CD) and DevSecOps practices
Added 29 days ago
Senior Product Manager, Cloud Security
Scotiabank
Toronto, ON
Drive delivery of cloud security capabilities and integrations across DevSecOps and platform environments
Added 1 month ago
Cybersecurity Engineer
Localcoin
Canada
We’re looking for a hands-on Cyber Security Engineer with strong DevSecOps instincts to help design, build, and mature security capabilities across our infrastructure, applications, and…
Added 1 month ago
C
Chief Information Security Officer (CISO)
Cohere
Remote, Canada
- Full-time
- Remote
Deep expertise across cloud security, DevSecOps, enterprise infrastructure, and AI/ML security, alongside strong familiarity with modern regulatory frameworks, governance expectations, and…
Added 22 days ago
Client Technology - Engineering - Architecture
EY
Toronto, ON
…e.g. application, infrastructure/cloud, integration, data and security architectures and successful delivery of functional as well as non-functional aspects of a product/platform, using…
Added 4 months ago
Senior Staff Developer
Benevity
Calgary, Alberta
Benevity is seeking a talented Senior Staff Developer, who has an extensive record of hands-on Full Stack Development and Architecture experience. This role, reporting to the Director of…
Added 4 months ago
Senior Staff Developer
Benevity
Vancouver, British Columbia
Benevity is seeking a talented Senior Staff Developer, who has an extensive record of hands-on Full Stack Development and Architecture experience. This role, reporting to the Director of…
Added 4 months ago
Senior Staff Developer
Benevity
Toronto, Ontario
Benevity is seeking a talented Senior Staff Developer, who has an extensive record of hands-on Full Stack Development and Architecture experience. This role, reporting to the Director of…
Added 25 days ago
M
DevSecOps Engineer
Maxima
Toronto, ON
- Full-time
It is a hands-on role in a full-stack environment, with a shift-left approach to security and a share of developer infrastructure work.
Added 5 months ago
EB
Staff Engineer, Cloud Engineering
EQ Bank | Canada's Challenger Bank
Toronto, Ontario
- Full-time
Contribute to DevSecOps initiatives and embed security, performance, and resiliency into deployment pipelines.
Added 4 months ago
Senior Software Developer
Hasbro
Montreal, Quebec
Security or DevSecOps experience, mitigating risk, and promoting data protection
Added 5 months ago
IC
Technical Writer
Interac Corp.
Toronto, Ontario · Interac Corp. Head Office
- Full-time
Every transaction matters. Every Canadian matters. At Interac, we protect both - driving trust, security, and inclusion, so our digital economy thrives.
Added 5 months ago
V
Enterprise Security Architect
Vancity
Toronto, ON · Vancouver, BC
- Full-time
Integrate security architecture principles into CI/CD pipelines to support DevSecOps initiatives
Added 5 months ago
P
Développeur·euse Senior – Plateforme // Senior Platform Engineer
Plusgrade
Montreal, Quebec
- Full-time
…while collaborating with engineering teams to advocate for a DevSecOps culture focused on the developer…
Added 5 months ago
TE
DevSecOps Engineer
THE EMPIRE LIFE INS. CO
Canada
- Full-time
The DevSecOps Engineer (Infrastructure) at Empire Life designs and maintains the building of Internal Developer Platform (IDP) toolchains and workflows. This role enables self-service…
Added 5 months ago
TE
Cloud Systems Administrator
THE EMPIRE LIFE INS. CO
Canada
- Full-time
…OPA/Rego, or Azure Policy) to ensure all infrastructure code meets security and budget requirements before…
Added 2 months ago
CI
Director, Data Enablement, Data Platforms
CPP Investments | Investissements RPC
Toronto, Ontario
- Full-time
Hands-on experience with Infrastructure as Code and DevSecOps practices, such as Terraform, continuous integration and delivery, automated security controls and observability

No more jobs.

Maxima

DevSecOps Engineer

Toronto, ON, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Sep 10, 2026

Original job description

About Maxima

Nobody went into accounting to spend the first week of every month matching transactions by hand. Maxima was built so they don't have to. Our agents do the accounting work itself: journal entries, transaction matching, reconciliations, and flux analysis, in real time and to SOX standards. Accountants review and approve. Nothing posts without a person signing off. We remove the grind, not the human.

Maxima is the first agentic AI platform for enterprise accounting. Our founders oversaw the finance org at Rubrik and built the month-end close systems at Twitter and Netflix. We've raised $41M from Redpoint Ventures, Kleiner Perkins, and Audacious Ventures, and we're backed by finance leaders at OpenAI, Rubrik, and Vanta. Maxima runs in production at Scale AI, Rippling, Glean, and SpotOn.

We are early, we are growing fast, and we are hiring people who would rather build the category than join it. Here is one way to do that.

The role

We are working on some of the hardest problems in enterprise automation, with an engineering team that includes staff-level talent from Robinhood, Glean, Google, Netflix, and Meta. The system handles high-volume financial data and complex accounting workflows, and every execution has to be accurate and reliable, because the output is a company's books.

You will own security across Maxima's software development lifecycle: CI/CD pipelines, cloud infrastructure on GCP, container and artifact hardening, secrets and key management, and the controls behind our SOC 1, SOC 2, and ISO 42001 compliance. Customers trust Maxima with their general ledger, and their auditors ask how we protect it. Your work is a large part of the answer.

It is a hands-on role in a full-stack environment, with a shift-left approach to security and a share of developer infrastructure work.

What you'll do

Implement and manage DevSecOps practices across the SDLC with a shift-left approach to security
Design and harden CI/CD pipelines such as GitHub Actions, with minimal permissions and OIDC with Workload Identity Federation for cloud deployments
Integrate and enforce SAST, dependency scanning, and secret scanning (for example Trufflehog or GitGuardian) so builds fail on high-severity issues
Secure GCP infrastructure with least-privilege IAM, VPC firewall rules, and Google Secret Manager, and manage encryption and key rotation with Cloud KMS
Harden containers and artifacts: multi-stage builds, image vulnerability scanning, and artifact signing with tools such as Cosign
Keep application code to secure coding practices, including input validation, output encoding, and secure authentication and session management through our Descope integration
Monitor CI/CD pipelines and production (GCP and Datadog) for anomalies, security events, and audit logs
Maintain the documentation and controls for SOC 2, SOC 1, and ISO 42001
Help with developer infrastructure, including deployment automation and internal tooling

What we're looking for

4 or more years in DevSecOps, security engineering, or a related role focused on CI/CD pipeline security
Bachelor's degree in any engineering discipline; computer science preferred but not required
Experience securing cloud environments, preferably GCP, including IAM, Secret Manager, VPC controls, and Cloud KMS
Hands-on experience hardening CI/CD systems such as GitHub Actions or Blacksmith
Proficiency in application security practices (SAST, DAST, secret scanning) and a deep understanding of common anti-patterns such as hard-coded secrets and insufficient input validation
Proficiency in Go, TypeScript, Python, or similar languages for automation and development
Comfort with Kubernetes and other container orchestration platforms
Familiarity with SOC 2, PCI DSS, or ISO 42001, and experience producing evidence for auditors
Strong verbal and written communication skills, and the ability to handle the pace of a startup

Where and how you'll work

This role is based in our downtown Toronto office, near Union Station. We value in-person collaboration and are in office four to five days a week for our on-site roles.

Why join Maxima

The work. Agentic accounting is a category being defined right now, and Maxima is one of the companies defining it. The product does the accounting work itself, so what you build, sell, or deploy shows up in a customer's books
The people. Founders who ran the finance org at Rubrik and built the close systems at Twitter and Netflix. Engineers from Robinhood, Glean, Google, Netflix, and Meta. Controllers and accountants on the team who have closed books themselves. Small teams in San Mateo and Toronto that work in the same room, say what they think, and hold a high bar
The benefits. Competitive salary, 401(k) for US employees, unlimited PTO, lunch in the office, and commuter benefits
The process. A person reads every application, and we tell you where you stand at every stage

A note on AI

We build AI and we expect you to use it. Use it to research us and to prepare. In live conversations we want your own thinking in your own words, and if you use AI on a take-home exercise, tell us where it helped.

Equal opportunity

Maxima is an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status, or any other legally protected status. If you need an accommodation at any point in the process, tell us and we will arrange it.

Apply About employer

More about this job

Responsibilities

Implement and manage DevSecOps practices across the SDLC with a focus on shifting security left. This includes hardening CI/CD pipelines, securing GCP infrastructure, and ensuring compliance with frameworks like SOC 2 and ISO 42001.

Requirements

Requires 4+ years of experience in DevSecOps or Security Engineering with strong proficiency in GCP and CI/CD hardening. A bachelor's degree in engineering is required, along with proficiency in languages such as Golang, TypeScript, or Python.

Skills

DevSecOps
Kubernetes
CI/CD
GitHub Actions
GCP
SAST
DAST
Golang
TypeScript
Python
IAM
SOC 2
ISO 42001
Container Hardening
Secret Scanning
Cloud KMS

Visa sponsorship

Not detected in the job text

Keywords

DevSecOps
Security Engineering
Kubernetes
GitHub Actions
GCP
SAST
DAST
Trufflehog
GitGuardian
OIDC
Workload Identity Federation
IAM
VPC Firewalls
Google Secret Manager
Cloud KMS
Cosign
Descope
Datadog
SOC 2
SOC 1
ISO 42001
PCI DSS
Golang
TypeScript
Python
SDLC
Container Orchestration
Supply Chain Integrity
Input Validation
XSS Prevention

Report this job