Senior Staff Security Engineer | Systems Engineering

ServiceNow

1d

About The Position

ServiceNow’s Enterprise Security organization is seeking a versatile Senior Staff Security Systems Engineer to support multiple security engineering functions in its Canadian regulated environment. The role spans identity, vulnerability management, cloud and infrastructure security, security data platforms, and ServiceNow security operations. It is suited to an engineer who enjoys working across disciplines, solving varied problems, and building scalable automation.

The position serves as the senior technical authority for security engineering in the Canada regulated environment. The engineer will build, harden, and operate security controls across on-premises, cloud, and isolated infrastructure; create automation and infrastructure-as-code for security engineering and operations, reporting, and remediation; and partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines. The role also supports security tools across identity, vulnerability scanning, logging, and cloud security, and produces operational and executive-facing security posture and performance reporting.

This position supports Government of Canada Protected B workloads. Applicants must be Canadian citizens or permanent residents, live in Canada, perform all work from within Canada, and obtain and maintain Government of Canada Reliability Status. Screening includes five years of verifiable background history, identity and education verification, a criminal record check, and a credit check. ServiceNow sponsors the screening; applicants do not need to hold Reliability Status before applying. Employment is conditional on successfully completing and maintaining the required screening.

Requirements

• 12 or more years of hands-on security or systems engineering experience in large-scale enterprise environments.
• Expert Linux administration and troubleshooting skills across OS internals, host networking, storage, virtualization, and containers.
• Proficiency with DNS, NTP, and LDAP services.
• Proficiency in Python and Shell for production-grade automation and integrations.
• Experience with DevOps methodologies, including infrastructure-as-code and configuration management such as Terraform, Ansible, or Puppet; CI/CD pipelines; and Git-based workflows.
• Expertise in network security fundamentals, including firewalls, segmentation, load balancers, and proxies.
• Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.
• Experience using AI in work, such as AI-powered tools, automated workflows, AI-driven insights, or evaluating how AI can change a function.
• Understanding of Canada Protected B classification and data residency requirements for Canadian government systems.
• Hands-on experience in at least two specialty areas: identity and access management; vulnerability management; public cloud security; security data platforms; infrastructure security; ServiceNow administration; or ServiceNow Security Operations.
• For the ServiceNow Administrator specialty: CSA certification or equivalent experience managing and optimizing the ServiceNow platform, including configuring workflows, maintaining user access and data integrity, supporting ITSM modules, scripting with JavaScript or GlideScript, and working with ACLs.
• For the ServiceNow Security Operations specialty: familiarity with ServiceNow Security Operations applications such as Vulnerability Response, Configuration Compliance, and Security Incident Response.
• Be a Canadian citizen or Canadian permanent resident.
• Live in Canada and perform all work from within Canada.
• Obtain and maintain Government of Canada Reliability Status; screening requires five years of verifiable background history, identity and education verification, a criminal record check, and a credit check.

Nice To Haves

• Certifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.
• Experience supporting highly regulated, isolated, or air-gapped government environments.
• Strong understanding of ITIL and ITSM processes.

Responsibilities

• Serve as the senior technical authority for security engineering in the Canada regulated environment.
• Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
• Build automation and infrastructure-as-code to streamline security engineering and operations, reporting, and remediation.
• Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
• Support security tooling across identity, vulnerability scanning, logging, and cloud security according to team priorities.
• Produce operational and executive-facing reporting on security posture and performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed