DevSecOps Engineer (GCP)

Location: Toronto

Company

hirify.global is a fintech startup backed by top-tier Silicon Valley investors, building an AI-driven accounting platform to automate enterprise financial processes.

What you will do

• Implement and manage DevSecOps practices across the entire Software Development Lifecycle (SDLC) using a shift-left approach.
• Design and harden CI/CD pipelines, including GitHub Actions, with minimal permissions and OIDC integration.
• Enforce security checks such as SAST, dependency scanning, and secret scanning to maintain build integrity.
• Secure GCP cloud infrastructure by applying the principle of least privilege, VPC firewall configurations, and secret management.
• Oversee container hardening, artifact signing, and vulnerability scanning to ensure supply chain security.
• Maintain documentation and controls to align with compliance frameworks like SOC 2 and ISO 42001.

Requirements

• 4+ years of experience in DevSecOps, Security Engineering, or CI/CD pipeline security.
• Proven experience securing cloud environments, specifically Google Cloud Platform (GCP).
• Strong practical experience with hardening CI/CD systems like GitHub Actions.
• Proficiency in Golang, TypeScript, or Python for automation and development.
• Familiarity with compliance standards such as SOC 2, PCI DSS, or ISO 42001.
• Ability to thrive in the fast-paced environment of a startup.

Culture & Benefits

• Opportunity to work with a team of industry veterans from top tech companies like Amazon, Google, and Netflix.
• Direct impact on a product backed by leading VCs like Kleiner Perkins.
• Fast-paced, high-intensity startup environment focused on solving complex enterprise accounting challenges.
• Commitment to equal opportunity and inclusive hiring practices.