Site Reliability Engineer - Application SecurityToronto Join us as we push engineering forward in a world that’s changing fast. You’ll help us evolve how we build, deploy, and secure software. Embracing new technologies, challenging the status quo, and finding better ways to ship faster without compromising reliability or security.

Working closely with our SRE and development teams, you’ll help run and improve our production infrastructure, streamline deployments, investigate production issues, and address security risks. You’ll also help build the technical controls that support SOC 2 audits and GDPR compliance. We’re excited to work with someone who’s curious about what’s next, passionate about continuous improvement, and motivated to turn new ideas into real engineering progress.

Become an AI-first engineering team. AI coding agents are a core part of how we build and operate. We use them to write and review Terraform, debug incidents, automate repetitive operational work, and move faster without lowering the bar on quality or security.

We’re looking for someone who already works this way, or is excited to: someone who knows how to direct an agent well, check its output with a critical eye, and spot where AI can remove toil from our infrastructure and security workflows. You’ll also help shape how we use AI safely, including guardrails, access controls, and keeping sensitive data protected. Our environment includes AWS, Kubernetes on EKS, Terraform, Terragrunt, GitHub Actions, Prometheus, Grafana, and CloudWatch.

Our applications use Ruby on Rails, Vue.Js, and Node.Js, with MySQL, PostgreSQL, and Sidekiq supporting the backend. Maintain AWS and Kubernetes environments, troubleshoot production issues, and improve availability, performance, and resource usage. Build and maintain infrastructure as code, review plans, manage environment configuration, and address infrastructure drift.

Deployments & developer experience: Improve CI/CD pipelines, deployment automation, release checks, and rollback procedures.

Monitoring & incidents: Improve monitoring and alerts, join the on-call rotation, and contribute to incident reviews.



Work with developers to assess vulnerabilities, review security risks, and validate fixes. Strengthen IAM, secrets management, network controls, and Kubernetes security. SOC 2 & GDPR: Support technical controls, audit evidence, and personal data protection.

Recovery: Test backups and recovery procedures, maintain runbooks, and support production readiness.

Collaboration: Participate in code reviews, document changes, and support application, AI, and data engineering teams. Around 5+ years of experience in SRE, DevOps, platform engineering, cloud operations, or a related engineering role.

Experience writing and maintaining Terraform modules and Terragrunt configuration, including reviewing plans and working with remote state.

Experience with Docker and Kubernetes, including troubleshooting deployments, services, health checks, and resource limits. A solid understanding of Linux, networking, DNS, and TLS.

Experience with Git, pull requests, CI/CD pipelines, and deployment workflows.

Experience using logs, metrics, dashboards, and alerts to investigate production problems. Understanding of common web application risks, including broken access control, injection, authentication weaknesses, and sensitive data exposure. Working knowledge of SOC 2 controls and GDPR principles relevant to engineering, including access restrictions, data minimization, retention, and deletion.

Supported

Ruby on Rails or Node.Js applications in production Worked with MySQL, PostgreSQL, Redis or Valkey, and Sidekiq Built practical monitoring with Prometheus, Grafana, or CloudWatch Supported services across multiple AWS regions Helped remediate penetration-test findings or contributed technical evidence to a SOC 2 audit Familiar with securing AI integrations, agent workloads, or MCP services You hold relevant AWS, Kubernetes, Terraform,



or security certifications. You'll work closely with SRE and application engineers, and support AI and data initiatives where they depend on shared infrastructure. You'll take part in technical discussions and code reviews, share what you learn, and help improve how we operate. 100% employer-paid benefits and a Health Spending Account from day one One personal day and two volunteering days A downtown Toronto office for hybrid work, with plenty of snacks The salary range for this role is $130,000-$150,000 Compensation is based on experience, skills, and our internal compensation framework and equity.

This is a full-time position on our SRE team. The role includes a shared on-call rotation after onboarding. We strongly encourage applications from everyone, regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

We use AI to take notes during interviews. Our applicant tracking system uses AI to help with workflows and keep the hiring process running smoothly.

Voluntary

Self-IdentificationFor government reporting purposes, we ask candidates to respond to the below self-identification survey. As set forth in ContactMonkey’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA.

S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.

📌 Site Reliability Engineer - Application Security (Winnipeg)
🏢 ContactMonkey
📍 Winnipeg