Staff Engineer (DevSecOps)

TL;DR

Staff Engineer (DevSecOps): Leading and supporting enterprise security, compliance, and risk management initiatives with an accent on implementing and maintaining controls aligned with ISO 27001, SOC 2, and NIST 800-53. Focus on designing and executing security programs, Kubernetes security, and integrating security into CI/CD pipelines in cloud-native environments.

Location: Hybrid in Ontario, Canada

Salary: $110,000 - $130,000 per year

Company/Компания

hirify.global is a global networking leader delivering cloud-driven networking solutions trusted by over 50,000 customers worldwide.

What you will do/Что делать

• Implement and maintain security controls aligned with ISO 27001, SOC 2, and NIST 800-53 frameworks.
• Collaborate with security leadership and auditors to ensure compliance and support audits.
• Develop and maintain automated security and compliance monitoring tools and dashboards.
• Integrate regulatory requirements into the Secure Development Lifecycle (SDLC).
• Conduct gap assessments, risk analysis, and track remediation efforts.
• Manage Kubernetes security including RBAC, pod security policies, network policies, and secrets management.

Requirements/Требования

• Must have 5+ years of experience in information security or compliance engineering roles.
• Practical experience with DevOps security practices and integrating security into CI/CD pipelines.
• Strong knowledge of ISO 27001, SOC 2 (Type I and II), and NIST SP 800-53.
• Experience with cloud-native environments (AWS, Azure, or GCP) and secure configuration.
• Excellent communication skills including policy and technical documentation writing.

Nice to have/Хорошо, если есть

• Professional certifications such as CISSP, CISA, CISM, ISO 27001 Lead Implementer/Auditor, or AWS Security Specialty.
• Experience with compliance automation platforms.
• Background in regulated industries like fintech, healthcare, or government.

Culture & Benefits/Культура и преимущества

• Inclusive workplace valuing diversity and differences.
• Global leader with double-digit growth and strong market position.
• Opportunities to work on cutting-edge security and compliance initiatives.