Hybrid DevOps Engineer – Cloud/Security

at Blanc Labs

• Job title: DevOps Engineer – Cloud/Security
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, Cloud, Docker, Firewalls, Jenkins, Kubernetes, Python, Terraform, Vault
• Location requirements: Hybrid, Toronto, Canada

About the role

• Senior DevOps Engineer specializing in Azure cloud security solutions for globally digitizing enterprises. Enhancing cloud security posture and automating scalable infrastructure at Blanc Labs.

Responsibilities

• Build and manage scalable, automated Azure infrastructure powering SaaS applications (multi-instance/multi-tenant).
• Design, implement and maintain CI/CD pipelines for application deployments across multiple environments and clients.
• Apply Infrastructure-as-Code (Terraform/Bicep/ARM) to standardize and replicate environments for different clients and projects.
• Implement cloud security best practices—identity and access management, encryption, secure networking, key management, secrets rotation, logging, and monitoring.
• Harden SaaS environments by configuring Azure Defender, Sentinel, Key Vault, Azure AD, firewalls, private endpoints, WAF, and security policies.
• Monitor system performance, uptime, scalability, and cost; proactively optimize resources for reliability and efficiency.
• Establish guardrails for secure deployment of new features, integrations, and client onboarding.
• Conduct vulnerability assessments, penetration test remediation, and compliance alignment (SOC2, ISO27001, CIS, etc.).
• Troubleshoot production issues and lead post-incident reviews to continuously improve resilience and security.
• Collaborate with engineering, architecture, and product teams to embed DevSecOps principles across projects.

Requirements

• 5+ years in DevOps or Cloud Engineering, with proven work on SaaS products and Azure environments.
• Strong hands-on experience with Azure Services (AKS, App Services, Azure AD, VNets, Key Vault, Storage, Azure Firewall, Load Balancer, App Gateway).
• Advanced knowledge of cloud security standards, IAM, RBAC, network segmentation, and encryption practices in Azure.
• Experience securing and managing multiple cloud instances/clients for SaaS environments.
• Strong CI/CD pipeline expertise using Azure DevOps / GitHub Actions / Jenkins.
• Infrastructure-as-Code expertise (Terraform / Bicep / ARM).
• Solid understanding of Kubernetes, Docker, container security, image scanning, and secrets management.
• Experience with Azure Monitor, Log Analytics, Sentinel, SIEM/SOC tools.
• Scripting skills in PowerShell, Bash, or Python.
• Familiarity with compliance frameworks (SOC2, ISO 27001, NIST, CIS Benchmarks).

Benefits

• Accommodations within reason due to a disability or medical need are available on request for candidates taking part in the recruitment process