Posted 10 days ago
DevOps & Security Engineer
@ Martello Technologies
Kanata, Ontario
Overview
Martello Technologies is hiring a DevOps & Security Engineer to own how its Vantage DX and MPA products are built, deployed and secured. The role runs CI/CD pipelines, hardens AWS and Azure environments, drives vulnerability remediation and supplies compliance evidence. It is a hybrid Ottawa-based full-time position requiring residence in Ottawa at hire, with 24-hour on-call duty.
Responsibilities:
- Own CI/CD pipelines, build infrastructure and release automation
- Secure AWS and Azure hosting, IAM and network configuration
- Run monitoring, alerting and incident response for production
- Operate the vulnerability lifecycle across code, dependencies and containers
- Supply compliance evidence for CRA reporting and security questionnaires
Requirements summary:
- 5+ years in DevOps, site reliability or platform engineering
- Hands-on CI/CD, containers and infrastructure as code
- Deep AWS production hosting and security experience
- Vulnerability management and risk-based prioritization
- Network security fundamentals and least-privilege access
- Python, Bash or PowerShell scripting
Tools & skills
Source and dates
Employer career site / ATS feed · bamboohr
- Employer posting date
- 2026-10-27
- First seen by our source
- 2026-10-28
- Source record updated
- 2026-11-04
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 5+ years |
| Hours per week | 40 (estimated) |
| Travel | air: none · ground: none |
| Work setting | Office, Home |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Martello Technologies
| Field | Value |
|---|---|
| Open jobs on Jobsy | 1 |
As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments.
This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.
This is an Ottawa based hybrid role and you must reside in Ottawa at the time of hire.
Key Responsibilities
Build, test automation, release, and deployment
- Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery
- Maintain infrastructure as code & keep dev & production environments consistent
- Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs
- Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review
- Help teams scale automated UI and regression testing (e.g. Playwright), so testing capacity grows with output.
- Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging
- Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects
Production monitoring and reliability
- Run monitoring, alerting, & incident response for production services
- Lead root cause analysis & lessons learned after customer-impacting events
- Track & improve deployment frequency, change failure rate, & mean time to recovery
Hosting and network security
- Secure cloud hosting, with AWS and Azure including
identity and access, secrets
management, network segmentation, firewall
and WAF rules, TLS, backups, and hardening
- Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling
- Secrets handling, least-privilege access, safe processing of data
- Monitor services with OpenTelemetry, & track usage and cost
- Review network security configuration on a regular schedule & fix drift
- Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docker, & cloud-init deployments, nginx, & scheduled jobs
- Experience operating LLM or AI agent workloads, AWS Bedrock,
AgentCore, cost monitoring & guardrails
- Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate
- Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
- Serve on the incident response team & the 24-hour on-call rotation
Required Qualifications
- 5+ years in DevOps, site reliability, or platform engineering
- Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software
- Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM, nginx, kubernetes)
- Working knowledge of vulnerability management: code, dependency, and container scanning (e.g.,
Trivy, Dependabot), triage, and remediation, including risk-based prioritization (e.g. severity scoring combined with exploitability data)
- Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN, least-privilege access
- Production monitoring, on-call, incident response, and root cause analysis experience
- Scripting and automation in Python, Bash, or PowerShell
- Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001
About Martello
We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.
Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.