Senior DevSecOps Engineer

5+ years of relevant experience spanning cloud infrastructure and security (DevSecOps, platform security, security engineering, SRE with strong security focus).

Deep hands-on experience with GCP (preferred) or AWS, including strong fundamentals in cloud networking and identity.

Strong hands-on experience with Kubernetes and service networking.

Strong Infrastructure-as-Code skills (for example Terraform) and the ability to build reusable, maintainable automation.

Practical experience integrating security into CI/CD and engineering workflows, including scanners and policy enforcement.

Experience with incident response: investigation, coordination, post-incident follow-through, and continuous improvement.

Supportive Team: Work with a passionate group where you’ll find a true sense of belonging.

Compensation: Competitive salaries with RRSP/401k matching and comprehensive medical, dental, and health insurance.

Flexibility: A flexible time-off policy and the choice to work remote, hybrid, or from our Toronto HQ.

Growth: Stipends for your home office setup and continuous professional learning.

Impact: The opportunity to do high-impact work at a mission-driven organization.

At Clearco, we strive for an inclusive, accessible recruitment process. If you have specific accessibility needs, please let us know so we can support you. Please note that we use AI-assisted tools to help our team manage applications, though humans remain the sole decision-makers in our hiring. Contact us for more information on our tools or to request an accommodation.

We are hiring a Senior DevSecOps Engineer to operate at the intersection of Infrastructure, Security, and Reliability.

This is a hands-on senior role that strengthens Clearco’s cloud security posture, builds secure-by-default platform guardrails, and improves our ability to detect and respond to security incidents.

You will partner closely with Product Engineering, Data Science, and IT to make security a practical part of how we build and run systems.

Own platform security and reliability improvements across our GCP environment.

Harden identity and network controls in GCP (IAM patterns, service accounts and workload identity, organization policies, and network segmentation controls).

Build security into CI/CD by implementing and enforcing scanning and policy controls (SAST, SCA, secret detection, and container/image scanning).