31 Oct
|
Aritzia
|
Vancouver
THE BUSINESS
We are Everyday Luxury™. It's what we do and how we do it — together. It's working alongside world-class talent in pursuit of world-class results. It's maximizing your potential in a high-performance culture. It's knowing that wherever you are, you belong. It's elevating your world — and the world of those who love and will love Aritzia. It's You. And an endless runway of prospect. With a Global Support Campus in Vancouver and additional Support Office hubs in major cities across North America — including Toronto, New York, Los Angeles and Seattle — our workplace network is strategically designed to support our People and serve our Clients a frictionless experience. So, you can do what you do best — with us.
THE TEAM
The mission of the Cybersecurity Department is to deliver high‐quality cybersecurity services and solutions that minimize risk across Aritzia’s systems and data.
THE OPPORTUNITY
Aritzia is growing and our Cybersecurity team is growing with it. This is a unique opportunity to be part of the team responsible for designing, engineering, and enabling secure technology solutions that protect Aritzia’s systems and data, reduce cybersecurity risk, and enable the business to operate and innovate securely. As the Senior Engineer/Engineer, Cybersecurity, you will engineer, implement, automate, and continuously improve security across enterprise technology, hybrid cloud, retail, eCommerce, endpoint, identity, application, API, software delivery, and AI-enabled environments. You will combine hands‑on security engineering with DevSecOps and automation, implementing and tuning security technologies, hardening systems and endpoints, embedding practical controls into development and deployment workflows,
automating security assurance and remediation, and making controls observable and supportable. With your valuable contribution to the business in this role, the opportunities are endless, from a rewarding career in Cybersecurity to continued growth and development with Aritzia.
THE ROLE
As the Senior Engineer/Engineer, Cybersecurity, you will:
- Configure, integrate, test, monitor, and improve enterprise security controls to meet defined security requirements, operational standards, and compliance obligations.
- Engineer, operate, and tune enterprise security tooling across EDR, SIEM, WAF, IAM, DLP, firewalls, secrets, and vulnerability management.
- Establish and maintain secure configuration baselines for Windows, Linux, cloud services, endpoints, network devices, applications, and supporting platforms.
- Implement least-privilege access, workload identity federation, credential rotation, and secure secrets management across applications and pipelines.
- Embed security controls across CI/CD pipelines, IaC, and deployment workflows, partnering with engineering teams to test and validate application and API security.
- Implement security controls for AI/agentic applications, including workload identities, tool permissions, trust boundaries, human‑in‑the‑loop approvals, and untrusted-input testing.
- Ensure controls produce useful telemetry, logs, alerts, and evidence for security monitoring,
incident response, investigations, and compliance obligations such as PCI DSS.
- Provide technical support during security incidents and investigations, participate in response and recovery activities, and contribute technical analysis to root cause identification and corrective actions.
- Support with evaluating new security technologies, integrations, and design patterns; conduct proof of concept testing and document findings; and support architecture and solution recommendations.
- Support with maintaining comprehensive technical documentation, including architecture diagrams, runbooks, standard operating procedures, and training materials.
THE QUALIFICATIONS
- Proven skills, certifications, education, and/or experience: Bachelor's degree in computer science, Software Engineering, Cybersecurity, or equivalent practical experience in full‑stack software engineering and cloud security engineering.
- Hands‑on experience implementing, automating, and supporting cloud services across Azure, GCP, or AWS, and administering Entra ID, Exchange Online, and Microsoft 365.
- Strong software engineering background with proficiency in Python and PowerShell.
- Extensive experience building automation, working with REST APIs, managing code in GitHub (Actions, Webhooks, Repositories), and embedding security into CI/CD pipelines.
- Hands‑on experience enforcing policy, posture, and endpoint security across hybrid fleets using Microsoft Intune (Windows/iOS/Android) and Jamf Pro (macOS).
- Hands‑on experience monitoring and hardening multi‑cloud environments using CNAPP tooling (e.g., Wiz, Defender for Cloud, GCP Security Command Center), enforcing IaC polic
📌 Technology - Senior Engineer/Engineer, Cybersecurity (Vancouver)
🏢 Aritzia
📍 Vancouver