Job TitleLead Automation Engineer

SummaryWe are seeking a Lead Automation Engineer (P5) to design, deliver, and scale automation that powers our cybersecurity platforms and operations. You will own the automation strategy and execution across SIEM, SOAR, endpoint, vulnerability, and cloud‐security workflows—eliminating manual toil, standardizing deployments, and embedding reliability into the way we operate.

Location note: this is a remote role within 50km of Mississauga Ontario or St Laurent Quebec, or Calgary, AB, or Vancouver, BC

What You'll Do

Own the automation roadmap aligned to platform runbooks and quarterly objectives;

prioritize high‐value use cases that reduce manual effort and improve speed/quality.

Design, implement, and maintain Python‐based playbooks, micro‐services, and scripts for enrichment, decisioning, remediation, and evidence collection.

Deliver self‐service capabilities (CLI/ChatOps/UI) that enable platform teams and SOC/IR to perform standardized actions safely and repeatedly.

Build robust API integrations between security tools and enterprise systems (e.G., SIEM/SOAR, endpoint, vulnerability scanners, ticketing/ServiceNow, CMDB, identity, cloud services).

Implement CI/CD workflows (GitHub Actions/Azure DevOps/GitLab CI), environment promotion, secrets management, and rollback safety for automation code.

Add observability to automation (structured logging, metrics, traces, alerts);

track playbook success/failure, latency, and error budgets.

Act as technical lead for automation initiatives;

mentor engineers on Python,



integration patterns, and CI/CD.

Partner closely with SOC/IR, Platform Ops, Cloud/Infra, and GRC to align automation to operational, resilience, and compliance needs.

What You Bring

Expert‐level Python (designing maintainable packages/services, async patterns where practical, testing, packaging, dependency management).

Practical experience building API integrations (REST/GraphQL), handling auth flows (OAuth2, JWT), and working with JSON/structured logs.

Demonstrated DevOps capability: CI/CD pipelines, artifact versioning, release orchestration, and basic container familiarity (Docker).

Hands‐on with at least two security/platform domains (e.G., SIEM/SOAR, endpoint/EDR, vulnerability management, email/data security, cloud security).

Strong communication skills and a track record of shipping reliable automation that measurably improves operations.

Minimum Requirements

Degree or equivalent and typically requires 10+ years of relevant experience. Less years required if has relevant Master's or Doctorate qualifications.

Preferable Skills & Experience

Experience with Terraform or Ansible for provisioning/configuration.





Familiarity with event‐driven patterns (webhooks, message queues) and serverless runtimes.

Experience optimizing cost/throughput for data pipelines or security platform ingestion.

Comfort with basic front‐end for internal self‐service tools (e.G., lightweight UIs, ChatOps).

What Success Would Look Like

Toil reduction and time‐to‐complete improvements for automated workflows.

Playbook success rate, latency, and reduction in manual escalations.

Coverage of automation across priority platforms (e.G., % alerts triaged/enriched automatically, % standard changes automated).

Deployment reliability (pipeline success, rollback readiness, change‐related incident reduction).

Quality and completeness of audit‐ready evidence produced automatically by automation jobs.

Tools & Environment

Language: Python (primary)

DevOps: GitHub/GitHub Actions or Azure DevOps;

container builds;
secrets management (e.G., Key Vault/Secrets Manager)

Integrations: REST/GraphQL APIs, ServiceNow/CMDB, identity platforms, cloud provider SDKs

Security platforms: SIEM/SOAR (e.G., Splunk, Cortex XSIAM/XSOAR), EDR (e.G., SentinelOne/Defender), Vulnerability Mgmt (e.G., Rapid7/Tenable), Email/Data Security (e.G., MDO/Proofpoint)

Nice‐to‐have: Terraform/Ansible, message queues (Event Hub/Kafka/SQS), simple UI/ChatOps front‐ends

Intitulé du posteIngénieur/e principal en automatisation

RésuméNous recherchons un/e Ingénieur/e principal en automatisation (P5) pour concevoir

📌 Lead Automation Engineer (Vancouver)
🏢 McKesson
📍 Vancouver