DevSecOps Engineer

Location:

Brampton
- In office role
Department:  IT / Engineering

Reports To:

Head of IT
About Pillway:
Pillway is a modern digital pharmacy transforming the way patients manage their medications. We combine advanced technology, innovative delivery services, and patient-first care to simplify pharmacy experiences across Canada. As part of our mission to redefine pharmacy, we are expanding our technology team to ensure security, scalability, and reliability at every level.

Role Overview
We are seeking a skilled  Dev Sec Ops  Engineer  to join our growing team. This role will be responsible for embedding security into every phase of the software development lifecycle, ensuring compliance with healthcare regulations, and strengthening our cloud infrastructure. The ideal candidate has strong expertise in cloud security (preferably Azure), CI/CD pipelines, and Dev Ops automation, with a passion for enabling secure innovation in a fast-paced healthcare environment.

Key Responsibilities
Security Integration:  Implement security best practices and controls across CI/CD pipelines, infrastructure, and applications.
Cloud Security:  Manage and enhance security posture in Azure cloud environments, including identity, network, and application layers.
Compliance:  Ensure infrastructure and deployments meet healthcare regulatory requirements (PHIPA, PIPEDA, SOC
2).
Infrastructure as Code (IaC):  Build and maintain secure, automated infrastructure using tools such as Terraform, Ansible, or Bicep.
Monitoring & Incident Response:  Deploy and manage security monitoring, logging, and alerting systems (SIEM, IDS/IPS, vulnerability scanning).

Collaboration:

Work closely with development, QA, and operations teams to integrate security controls into pipelines and processes.
Automation:  Enhance Dev Ops practices with automated testing, policy enforcement, and configuration management.
Continuous Improvement:  Conduct regular threat modelling, risk assessments, and penetration testing.
Qualifications
Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
4+ years of experience in Dev Ops or security engineering, with at least 2 years in a Dev Sec Ops  role.
Hands-on experience with Azure cloud services, security policies, and monitoring tools.
Proficiency with CI/CD pipelines (Azure Dev Ops, Git Hub Actions, Jenkins, or similar).
Strong knowledge of containerization and orchestration (Docker, Kubernetes).

Experience with IaC tools such as Terraform, ARM, Bicep, or Ansible.
Knowledge of security frameworks and standards (NIST, CIS Benchmarks, OWASP).
Familiarity with compliance in healthcare environments is a strong asset.
Excellent communication and collaboration skills.
Nice to Have
Certifications such as  AZ-500 (Azure Security Engineer), CISSP, CISM, or Dev Sec Ops -specific certifications .

Experience with secrets management (Vault, Azure Key Vault).
Familiarity with generative AI security and modern automation tools.

What We Offer
Competitive compensation package.
Comprehensive health and dental benefits.
Flexible hybrid/remote work options.
Opportunity to make a real impact on healthcare innovation in Canada.
A collaborative, fast-paced environment where new ideas are valued

#J-18808-Ljbffr