← All roles

DevSecOps Engineer

Maxima.ai· Engineering & Product
Apply on company site
TorontoFull-timePosted 5mo ago

About the role

DevSecOps Engineer responsible for security across Maxima's software development lifecycle, including CI/CD, cloud infrastructure on GCP, container hardening, secrets management, and controls for SOC 1, SOC 2, and ISO 42001 compliance.

Responsibilities

  • Implement and manage DevSecOps practices across the SDLC with a shift-left approach to security
  • Design and harden CI/CD pipelines such as GitHub Actions, with minimal permissions and OIDC with Workload Identity Federation for cloud deployments
  • Integrate and enforce SAST, dependency scanning, and secret scanning (e.g. Trufflehog or GitGuardian) so builds fail on high-severity issues
  • Secure GCP infrastructure with least-privilege IAM, VPC firewall rules, and Google Secret Manager, and manage encryption and key rotation with Cloud KMS
  • Harden containers and artifacts: multi-stage builds, image vulnerability scanning, and artifact signing with tools such as Cosign
  • Keep application code to secure coding practices, including input validation, output encoding, and secure authentication and session management through our Descope integration
  • Monitor CI/CD pipelines and production (GCP and Datadog) for anomalies, security events, and audit logs
  • Maintain the documentation and controls for SOC 2, SOC 1, and ISO 42001
  • Help with developer infrastructure, including deployment automation and internal tooling

Qualifications

  • 4 or more years in DevSecOps, security engineering, or a related role focused on CI/CD pipeline security
  • Bachelor's degree in any engineering discipline; computer science preferred but not required
  • Experience securing cloud environments, preferably GCP, including IAM, Secret Manager, VPC controls, and Cloud KMS
  • Hands-on experience hardening CI/CD systems such as GitHub Actions or Blacksmith
  • Proficiency in application security practices (SAST, DAST, secret scanning) and understanding of anti-patterns
  • Proficiency in Go, TypeScript, Python, or similar languages for automation and development
  • Comfort with Kubernetes and other container orchestration platforms
  • Familiarity with SOC 2, PCI DSS, or ISO 42001, and experience producing evidence for auditors
  • Strong verbal and written communication skills, and the ability to handle the pace of a startup

Skills

Required:DevSecOpsCI/CD securityCloud security (GCP)Container securityApplication security

Benefits

  • Competitive salary
  • 401(k) for US employees
  • Unlimited PTO
  • Lunch in the office
  • Commuter benefits
Last updated Sep 23, 2026. Interested? Apply on the company site.

About Maxima.ai

AI Accounting Automation for Enterprises

Maxima automates accounting with agentic AI—journals, reconciliations, and flux analysis—delivering a SOX-compliant, real-time close for enterprise finance teams.

accountingAIenterprise
Company profileWebsite

More open roles at Maxima.ai