Senior Security Engineer

Senior Security Engineer LocationOttawa or TorontoEmployment TypeFull timeLocation TypeOn-siteDepartmentSecuritySenior Security EngineerLocation: Toronto, On-SiteReports to: Head of SecurityThe RoleThis is an early, high-ownership security engineering hire. You'll design and operate the security platform end to end — identity, endpoints, detection, automation, and compliance — for a company where security is a first-class product and customer requirement, not an afterthought. You'll build greenfield, set the standards the rest of the team inherits, and translate demanding compliance obligations into clean, automated engineering. If you want to own a security program from the ground up in a mission-driven defence-tech environment, this is it.What You'll DoBuild and operate our identity platform as infrastructure-as-code (Terraform-managed IdP), including SSO/SCIM integrations across the full application estateImplement phishing-resistant authentication and device-trust enforcement using hardware security keys (WebAuthn/FIDO2)Deploy, maintain, and tune endpoint detection & response (EDR) across the device fleetDesign and maintain secure MDM baselines — configuration profiles and policies for all managed endpointsIntegrate our HRIS and IT asset-management systems with identity and endpoint tooling to automate joiner/mover/leaver and full asset-lifecycle workflowsStand up and refine log-ingestion pipelines into our SIEM / security-analytics platformDevelop detection-as-code capabilities — version-controlled, tested, CI/CD-deployed detectionsDesign and operate SOAR-driven automation that orchestrates identity, secrets management, the productivity/collaboration suite, security tooling, and custom GenAI/LLM models (managed/self-hosted inference)Deploy and continuously refine enterprise security controls to counter emerging threats and meet compliance baselines (CPCSC, NIST SP 800-171 / ITSP.10.171)Ensure every security platform and control satisfies Canadian data-residency requirementsOwn third-party/vendor security due diligence and ensure vendors meet our trust and sovereignty requirementsWhat You Bring5+ years in security engineering, infrastructure security, or a closely related disciplineDeep, hands-on identity & access management experience: building and operating a modern IdP, SSO/SCIM, phishing-resistant MFA, and device trustStrong infrastructure-as-code skills (Terraform) applied to security toolingEndpoint security expertise: EDR operations and MDM baseline design across macOS (Windows/Linux a plus)SIEM / log-pipeline engineering and detection-as-code (version control, testing, CI/CD)Security automation / SOAR experience and comfort integrating APIs across a diverse stack; proficient scripting (Python or similar)Working knowledge of security control frameworks (NIST SP 800-171, CMMC/CPCSC, ITSP.10.171) and a track record of turning controls into engineering workExperience assessing third-party / vendor security and reasoning about data residency and sovereignty in a Canadian contextNice to HaveExperience in defence, government, critical infrastructure, or other regulated / high-assurance environmentsEligibility to obtain a Canadian security clearance (Reliability or Secret) — a strong asset as the role growsExperience securing GenAI/LLM systems and building AI-driven security automationExposure to OT, embedded, robotics, or autonomous-systems securityRelevant certifications (OSCP, GIAC, etc.) — valued, not requiredNo defence background required.We've hired people who didn't tick every box. If this is the work you want to do, please apply anyway. Why Join UsBuilding something meaningful starts with the right people. At Dominion Dynamics, you’ll:Shape Canada’s future by building real defence capability for the CAF and our allies.Make decisions that ship in a high-trust environment with short feedback loops and rapid iteration.Move fast, field faster, and work directly with the operator — our systems are in the field with the...