About The Position
The Staff Security Engineer will engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure for ServiceNow’s Security Organization. The role builds automation and infrastructure-as-code to streamline security operations, reporting, and remediation, and partners with infrastructure, application, and platform owners to drive remediation and track compliance with CIS and NIST baselines. The engineer also supports security tooling across identity, vulnerability scanning, logging, and cloud security, and produces operational and executive-facing security posture and performance reports. This position supports Government of Canada Protected B workloads. Applicants must be Canadian citizens or permanent residents, live in Canada, and perform all work from within Canada. The successful candidate must obtain and maintain Government of Canada Reliability Status. Screening includes five years of verifiable background history, identity and education verification, a criminal record check, and a credit check. ServiceNow sponsors the screening; candidates do not need to hold Reliability Status at the time of application. The role may require a higher level of security clearance in the future, and employment is conditional on successfully completing and maintaining the required screening.
Requirements
- At least 8 years of hands-on security engineering or systems administration experience in large-scale enterprise environments.
- Strong Linux administration and troubleshooting skills, with working knowledge of Windows and directory services such as Active Directory and LDAP.
- Proficiency in Python and PowerShell or Bash for production-grade automation and integrations.
- Experience with infrastructure-as-code and DevOps practices, including Terraform, Ansible or Puppet, CI/CD pipelines, and Git-based workflows.
- Solid understanding of network security fundamentals, including firewalls, segmentation, proxies, and DNS.
- Experience hardening systems against CIS, STIG, or NIST baselines and translating requirements into technical controls.
- Understanding of Canada Protected B classification and data residency requirements for Canadian government systems.
- Hands-on experience in at least two specialty areas: Identity and Access Management; Vulnerability Management; Public Cloud Security; Security Data Platforms; Infrastructure Security; ServiceNow Administration; or ServiceNow Security Operations.
- For ServiceNow Administration specialty experience: CSA certification or equivalent experience managing and optimizing the ServiceNow platform, including workflows, user access and data integrity, ITSM modules, scripting with JavaScript or GlideScript, and ACLs.
- For ServiceNow Security Operations specialty experience: familiarity with ServiceNow Vulnerability Response, Configuration Compliance, and Security Incident Response applications.
- Meet the position’s eligibility requirements: be a Canadian citizen or permanent resident, live and work from within Canada, and obtain and maintain Government of Canada Reliability Status.
Nice To Haves
- Certifications such as CISSP, CCSP, CISM, ServiceNow CSA, Tenable Certified Engineer, Cribl Admin, or a GCP security certification.
- Experience supporting highly regulated, isolated, or air-gapped government environments.
- Experience with AI or LLM-based automation, including agents, chatbots, or API-driven workflows.
- Strong understanding of ITIL and ITSM processes.
Responsibilities
- Engineer, harden, and operate security controls across on-premises, cloud, and isolated infrastructure.
- Build automation and infrastructure-as-code to streamline security operations, reporting, and remediation.
- Partner with infrastructure, application, and platform owners to drive remediation and track compliance against CIS and NIST baselines.
- Support security tooling across identity, vulnerability scanning, logging, and cloud security based on team priorities.
- Produce operational and executive-facing reporting on security posture and performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
