As our DevOps & Security Engineer, you’ll own how Vantage DX and MPA are built, deployed, and secured. That means running the CI/CD pipelines, hardening our AWS and Azure environments, and driving vulnerability remediation. You’ll also supply the technical evidence behind our compliance commitments.
This is a hands-on role at a small company, so you’ll own a lot and your impact will be easy to see.
This is an Ottawa based hybrid role and you must reside in Ottawa at the time of hire.
Key Responsibilities
Build, test automation, release, and deployment
- Own CI/CD pipelines, build infrastructure, & release automation covering cloud-hosted and on-premises delivery
- Maintain infrastructure as code & keep dev & production environments consistent
- Make releases repeatable, auditable, fast, and propose & deliver the build, test automation, and deployment improvements each product needs
- Remove verification bottlenecks that come with higher AI-driven code volume: automated security and quality gates on pull requests, AI-assisted review that feeds human review
- Help teams scale automated UI and regression testing (e.g. Playwright), so testing capacity grows with output.
- Implement technical controls for AI coding tools, such as secrets scanning, license and provenance checks, & audit logging
- Report delivery-flow metrics: pull request size, time to review, test cycle time, & escaped defects
Production monitoring and reliability
- Run monitoring, alerting, & incident response for production services
- Lead root cause analysis & lessons learned after customer-impacting events
- Track & improve deployment frequency, change failure rate, & mean time to recovery
Hosting and network security
- Secure cloud hosting, with AWS and Azure including
identity and access, secrets
management, network segmentation, firewall
and WAF rules, TLS, backups, and hardening
- Identity and access management including Keycloak single sign-on, OAuth/OIDC, and JWT handling
- Secrets handling, least-privilege access, safe processing of data
- Monitor services with OpenTelemetry, & track usage and cost
- Review network security configuration on a regular schedule & fix drift
- Run cloud infrastructure behind our applications: Kubernetes, Terraform, Docker, & cloud-init deployments, nginx, & scheduled jobs
- Experience operating LLM or AI agent workloads, AWS Bedrock,
AgentCore, cost monitoring & guardrails
- Operate the vulnerability lifecycle across code, dependencies, & containers: scan, triage, and report. Set risk-based prioritization and severity-based remediation timelines, & drive down time to remediate
- Supply the technical evidence behind compliance work, such as scan results, remediation records, and SBOMs, for EU Cyber Resilience Act (CRA) reporting & customer security questionnaires
- Serve on the incident response team & the 24-hour on-call rotation
Required Qualifications
- 5+ years in DevOps, site reliability, or platform engineering
- Hands-on CI/CD (e.g., GitHub Actions), containers, & infrastructure as code e.g., Terraform with experience delivering both cloud and on-premises software
- Deep production experience hosting and securing workloads on AWS (e.g, IAM, CloudFront, ALB, S3, and SSM, nginx, kubernetes)
- Working knowledge of vulnerability management: code, dependency, and container scanning (e.g.,
Trivy, Dependabot), triage, and remediation, including risk-based prioritization (e.g. severity scoring combined with exploitability data)
- Network security fundamentals: segmentation, firewalls and WAF, TLS, VPN, least-privilege access
- Production monitoring, on-call, incident response, and root cause analysis experience
- Scripting and automation in Python, Bash, or PowerShell
- Exposure to compliance frameworks such as CRA, SOC 2 or ISO 27001
About Martello
We provide modern workplace optimization solutions that monitor the performance of cloud collaboration and productivity tools to give enterprises insight into the user experience.
Martello offers a positive, diverse, and supportive culture. Martello Technologies is committed to supporting a culture of inclusion, diversity, and accessibility to employment for all. We are proud to operate as an equal opportunity employer.
