Jobs / CONTACTMONKEY
Site Reliability Engineer - Application Security
CONTACTMONKEY · Toronto, ON, Canada
Toronto, ON, CanadaFull timeExp: 5+ yrs130,000-150,000 CAD/yearlyHybrid
Remuneration
Stock option plan; compensation also considers experience, skills, and equity.
Location
Toronto, ON, Canada
Visa sponsorship
Not specified
Job summary
This SRE role operates and improves production infrastructure, reliability, deployment workflows, and security in collaboration with application, AI, and data engineering teams. The work includes supporting AWS and Kubernetes on EKS, managing Terraform and Terragrunt, improving CI/CD and observability, responding to incidents through a shared on-call rotation, and supporting SOC 2 and GDPR controls. The environment includes GitHub Actions, Prometheus, Grafana, and CloudWatch.
Benefits
Employer-paid benefitsHealth Spending Account from day oneWork from anywhere in the world for up to four weeksStock option planRRSP Group Savings PlanVacation packagePersonal development budgetOne personal dayTwo volunteering daysBirthday offFive health days per year
Qualifications
- Around five or more years of relevant SRE, DevOps, platform engineering, cloud operations, or related engineering experience, or equivalent practical experience.
- Hands-on experience supporting production workloads in AWS.
- Experience with Terraform modules and Terragrunt, including plan reviews and remote state.
- Experience with Docker and Kubernetes troubleshooting, including deployments, services, health checks, and resource limits.
- Solid understanding of Linux, networking, DNS, HTTP, and TLS.
- Ability to automate using Python, Bash, Ruby, JavaScript, or another suitable language.
- Experience with Git, pull requests, CI/CD pipelines, and deployment workflows.
- Experience using logs, metrics, dashboards, and alerts to investigate production issues.
- Practical application security experience and understanding of common web application risks.
- Familiarity with IAM, least privilege, secrets management, encryption, SOC 2, and GDPR principles.
- Clear communication, sound judgment, and willingness to collaborate, seek review, or escalate.
Responsibilities
- Maintain AWS and Kubernetes environments and improve availability, performance, and resource usage.
- Build and maintain Terraform modules and Terragrunt configuration; review plans, manage remote state, and address infrastructure drift.
- Improve CI/CD pipelines, deployment automation, release checks, and rollback procedures.
- Improve monitoring and alerts, participate in on-call, troubleshoot production issues, and contribute to incident reviews.
- Assess application vulnerabilities, review security risks, and validate fixes with developers.
- Maintain code, dependency, secrets, container, and infrastructure scanning.
- Strengthen IAM, secrets management, network controls, and Kubernetes security.
- Support SOC 2 technical controls and audit evidence, and GDPR-related personal data protection.
- Test backups and recovery procedures, maintain runbooks, and support production readiness.
- Use AI coding agents to improve infrastructure and security workflows while protecting sensitive data.
Skills
Argo CDAWSBashCloudWatchDockerEKSGitGitHubGitHub ActionsGrafanaHelmIAMJavaScriptKubernetesLinuxMySQLNode.jsPostgreSQLPrometheusPythonRedisRubyTerraformTerragrunt
Certifications
Relevant AWS, Kubernetes, Terraform, or security certifications are advantageous
Work schedule
Shared on-call rotation after onboarding
Industry
Software as a serviceEmployee communications technology
Relocation
No