NYSE: PD) is the global leader in AI-first digital operations. By automatically detecting, diagnosing, and remediating issues, the PagerDuty Platform orchestrates AI agents and automated workflows with context from over 750 integrations. Notable customers include Chipotle, Cloudflare, Docusign, Fox, Nvidia, Salesforce, Spotify, Zoom and more.

We are growing rapidly and hiring top talent with leading AI skills across engineering, sales, product, marketing, and beyond as we build the leading digital operations platform. PagerDuty is seeking a Senior Security Engineer to join our Cloud Security team, part of Security Engineering within the CTO organization. This is a preventive, platform-focused role for a strong engineer: you'll build and operate security-focused systems at scale to protect PagerDuty's multi-account AWS environment and the Kubernetes platforms running on it, with deep responsibility across container security and identity & access management (and, ideally, cryptography and key management).

We lean hard into AI to move faster, so you'll both use and build agentic solutions to streamline how the team hardens, threat models, assesses risk, and operates. You'll partner with 30+ engineering teams to unblock them securely, and since we own and operate what we build, your controls ship as code, get validated against real usage, and roll out without disrupting engineering — including across our FedRAMP footprint. This role will be require to work 2 days week from our Toronto, Ontario office Harden PagerDuty's AWS and Kubernetes environments against CIS Benchmarks, DISA STIGs, and FedRAMP Moderate (Class C) baselines across a multi-account, multi-org footprint — proving results through evidence, config-remediation tooling, and KPIs that track posture, identity, and encryption/PKI health so we know where we stand and where the gaps are. Own Kubernetes and container security end to end — harden EKS clusters and the Istio service mesh against the CIS Kubernetes Benchmark, DISA Kubernetes STIG, and NSA/CISA Kubernetes hardening guidance, design and enforce Kubernetes RBAC and least-privilege workload identity (IRSA/pod identity), and drive controls for the container supply chain (image provenance, admission control, runtime policy).

Build and operate security-focused platforms, services, and automation at scale — using Python/Go, Terraform, and Kubernetes policy-as-code — that reduce manual work and let 30+ engineering teams move quickly and safely. Own PKI and encryption standards across the environment — certificate lifecycle and management, KMS-backed key management and rotation, TLS/mTLS (including within the Istio mesh), and encryption-at-rest and in-transit requirements — and define the standards other teams build against. Design and roll out Service Control Policy (SCP)



guardrails and least-privilege IAM/PAM across dozens of accounts and multiple orgs.

Lean into AI to unlock efficiency and velocity — consume agentic tooling in day-to-day work and build lightweight agentic solutions that streamline repetitive security work: posture triage, threat modeling, risk assessment, incident enrichment and investigation, compliance-evidence generation, and detection tuning. Shape detection strategy for the domains you own — Kubernetes/Istio and identity — authoring and tuning detections in our SIEM stack, defining what "good" coverage looks like for these domains, and threat hunting for container escape, lateral movement, anomalous mesh traffic, and identity or credential abuse. Participate in the team's on-call rotation, triaging and dispositioning cloud and Kubernetes threat alerts and acting as Incident Commander during incidents — driving containment, blast-radius/exposure analysis, and post-incident review.

Mentor and guide teammates on platform, identity, and cryptography security practices, and contribute to roadmap and annual planning. At the senior end of this role, you'll help draft external- and auditor-facing communication and represent the team in cross-team planning. ~ Solid software engineering background — years building and operating production systems at scale, with the ability to design and ship security-focused platforms, services, and tooling as a developer (not just configure them). Proficiency in Python and/or Go (or similar) and Infrastructure as Code (Terraform). ~5+ years in security engineering with deep, hands‑on expertise securing Kubernetes and containerized environments — EKS, Kubernetes RBAC, admission control (e.g., OPA/Gatekeeper or Kyverno), network policy, workload identity (IRSA/pod identity), container runtime/image security, and a service mesh such as Istio. ~ Deep expertise with AWS security services and least-privilege IAM/PAM — IAM family, Organizations/SCPs, Secrets Manager, KMS, GuardDuty, CloudTrail, and Config. ~ Ability to automate security controls as code (Kubernetes policy-as-code) and inform detection strategy in a modern SIEM (e.g., Experience with incident response and on‑call, a builder's mindset toward AI/agentic tooling to accelerate security work, and a track record of scoping ambiguous projects and driving them to completion with high ownership.

Hands‑on expertise in PKI and cryptography — certificate lifecycle/management, TLS/mTLS, key management and rotation (AWS KMS or similar HSM/KMS), and encryption at rest and in transit.





Experience building agentic or AI‑assisted security automation, and familiarity with securing AI/ML or agentic workloads running on cloud and Kubernetes infrastructure. Cloud‑native security tooling such as Wiz (CNAPP/Threats) and CrowdStrike Falcon runtime protection; Azure security exposure (Entra ID, Defender for Cloud) a plus. The base salary range for this position is 156,800 - 206,800 CAD.

This role may also be eligible for bonus, commission, equity, and/or benefits. Your recruiter can share more about the specific offerings for this role, as well as the salary range for your primary work location during the hiring process. Our values guide how we support customers, collaborate with colleagues, develop products, and foster a culture of belonging.

People

Leaders at PagerDuty are responsible for creating high performance environments that drive accountability. Each dimension has three associated competencies to give leaders a shared language for guiding their development, career, promotion, and succession planning discussions.

Our Manager

Expectations serve as a practical guide for managers to understand their responsibilities, prioritize their efforts, and drive engagement and performance. As a global organization, our total rewards approach is competitive with industry standards and aligned with local laws and regulations. Learn more, including country‑specific offerings, on our benefits site .

Company equity* Retirement or pension plan* Generous paid vacation time Paid holidays and sick leave Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non‑pregnant parent (some countries have longer leave standards and we comply with local laws)* NYSE:PD) is a global leader in digital operations management. The PagerDuty Operations Cloud is an AI‑powered platform that empowers business resilience and drives operational efficiency for enterprises. With a generative AI assistant at its core, PagerDuty empowers teams to detect and resolve issues in real time, orchestrate complex workflows, and drive continuous improvement across their digital operations.

Trusted by nearly half of both the Fortune 500 and the Forbes AI 50, as well as approximately two-thirds of the Fortune 100, PagerDuty is essential for delivering always‑on digital experiences to modern businesses Go behind‑the‑scenes on our careers site and @pagerduty on Instagram. PagerDuty does not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, parental status, veteran status, or disability status. By submitting an application, you confirm that you have read and understand PagerDuty's Privacy Policy .

PagerDuty is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application process.

📌 Senior Security Engineer - Cloud Security New Toronto
🏢 PagerDuty
📍 Toronto