Maxima
DevSecOps Engineer
Toronto
Sponsorship not specifiedDetected 70 days ago
PythonGoFull-Stack DevelopmentGitGCPCloud PlatformsKubernetesCI/CDGitHub ActionsDatadogCybersecurityComplianceAccountingSupply ChainFirewallCommunication
About the role
- Comfortable with Kubernetes and other container orchestration platforms
- Secure cloud infrastructure (GCP) by implementing the principle of least privilege for IAM, configuring VPC firewalls to restrict traffic, and using Google Secret Manager.
- Ensure application code follows secure coding best practices, including input validation, output encoding to prevent XSS, and secure authentication/session management via Descope integration.
Responsibilities
- Implement and manage DevSecOps practices across the entire Software Development Lifecycle (SDLC), ensuring a "shift-left" approach to security.
Requirements
- 4+ years of experience in DevSecOps, Security Engineering, or a related role focused on CI/CD pipeline security.
- Proven experience securing cloud environments, preferably Google Cloud Platform (GCP), with familiarity in IAM, Secret Manager, VPC controls, and Cloud KMS.
- Strong practical experience with hardening continuous integration/continuous deployment (CI/CD) systems (e.g., GitHub Actions, Blacksmith, or similar).
- Proficiency in security practices for application development (SAST, DAST, secret scanning) and a deep understanding of common security anti-patterns (e.g., hard-coded secrets, insufficient input validation).
- Familiarity with compliance standards like SOC 2, PCI DSS, or ISO 42001 and experience generating evidence for auditors.
- Bachelor's degree in any engineering discipline; Computer Science is preferred but not mandatory.
- Proficient in languages like Golang, Typescripts, Python, or similar programming languages used for automation and development.
- Can handle the high intensity and fast pace of a startup environment.
- Strong verbal and written communication skills.
Nice to have
- Bachelor's degree in any engineering discipline
- Computer Science is preferred but not mandatory.
Company info
- At Maxima, we're eliminating the pain of enterprise accounting through powerful integrations, intuitive design, and AI-driven automation. By consolidating processes into a single, easy-to-use platform and automating repetitive tasks, we free accounting teams to focus on strategic, high-impact work-achieving more with fewer resources.
- Our team is led by top engineers and finance professionals from companies like Robinhood, Bolt, EY, Facebook, Twitter, Netflix, Amazon, Google, Airbnb, Rubrik, and more. Together, we're using our extensive industry experience to transform the way businesses manage their finances.
- Maxima is backed by leading Silicon Valley investors. We raised the largest seed round in our category, with support from top-tier VCs such as Kleiner Perkins and Audacious Ventures. This funding has allowed us to launch a fully operational product and onboard several major customers.
- At Maxima, we're eliminating the pain of enterprise accounting through powerful integrations, intuitive design, and AI-driven automation.
- By consolidating processes into a single, easy-to-use platform and automating repetitive tasks, we free accounting teams to focus on strategic, high-impact work-achieving more with fewer resources.
- Our team is led by top engineers and finance professionals from companies like Robinhood, Bolt, EY, Facebook, Twitter, Netflix, Amazon, Google, Airbnb, Rubrik, and more.
- Together, we're using our extensive industry experience to transform the way businesses manage their finances.
- Maxima is backed by leading Silicon Valley investors.
- We raised the largest seed round in our category, with support from top-tier VCs such as Kleiner Perkins and Audacious Ventures.
- This funding has allowed us to launch a fully operational product and onboard several major customers.
This listing is sourced directly from Maxima's careers page and normalized into a canonical job model.