AI Security Engineer in Toronto

This role primarily focuses on the design, review of AI Security architecture and the deployment and management of AI Solutions at Celestica. It includes the secure deployment of AI products/services, administration and governance of AI Models (Anthropic, OpenAI, Google Gemini, etc.), deployment and management of AI Agents and Infrastructure supporting AI use cases. This role will also provide governance and oversight into the consumption of AI, providing input into aspects such as the creation of usage policies, forecasting and optimizing token consumption, model selection while maintaining stringent security controls.

This role reports into the Corporate IT Security leadership and will work within the IT function and the business to ensure that we meet and exceed the security requirements from Celestica customers. This role will also have to coordinate with external vendors and internal IT teams to ensure that the cybersecurity requirements are met and exceeded.

Detailed Description

• Architects, designs, and secures AI Solutions in multi-cloud environments, specifically focusing on Google Cloud Platform (GCP), Microsoft Azure, and AWS to enable secure deployment of enterprise AI solutions.
• Setup, maintenance and ongoing governance of various subscriptions to AI Vendors such as Anthropic and OpenAI, including AI Fin Ops.
• Architects, builds, and enforces security guardrails for AI Agents, establishing robust governance frameworks to monitor and control agentic behaviors.
• Participates in the security review of new applications with AI Features.
• Leads the product selection or review for new cloud and AI security technologies, conducting Proof of Concepts (POCs) and technical evaluations.
• Establishes and maintains effective relationships with process owners/sites to proactively assess business risks and develop risk mitigation.
• Design and participate in the continued management and maintenance of AI security policies, standards, guardrails and roadmaps.
• Design AI Guardrails and rules to secure AI Agents and data.
• Establishes and maintains effective relationships with process owners to proactively assess AI-related business risks, threats, and mitigation strategies.
• Designs and implements security controls for SaaS and PaaS AI integrations to ensure continuous data protection, DLP, and regulatory compliance.
• Communicates governance and compliance objectives, fostering a compliant and risk-aware security culture across internal engineering and product teams.
• Operational knowledge and experience deploying and running solutions in cloud (Microsoft Azure, Google Cloud Platform and AWS).
• Demonstrated development experience including coding or scripting experience (e.g., Python, Powershell, Java, .NET).
• Knowledge and proficiency managing and supporting solutions on Windows and Linux.
• Experience supporting IT Infrastructure such as Virtual Machines, Networking, DNS.
• Knowledge and experience in the deployment and management of Docker and Kubernetes images (including their hosting infrastructure).
• Knowledge and experience in ML Pipeline Architecture.
• Strong expertise in administering, configuring, and monitoring enterprise AI models including Claude, ChatGPT, and Google Gemini.
• Experience building governance frameworks for AI Agents, managing agentic permissions, tool execution, and runtime security controls.
• Must have strong knowledge of identity and access management, API connectivity, Model Context Protocol (MCP), data security and API security.
• Familiarity with security concepts such as adversarial examples and evasion attacks, data poisoning and training-time attacks, model extraction/stealing and inversion attacks, membership inference attacks, prompt injection (direct and indirect) and jailbreaking, supply chain risks in pre-trained models, datasets, and third-party fine-tunes, backdoors/trojans embedded in models.
• Familiarity with data concepts such as data lineage and provenance tracking, access controls over training data and embeddings.
• Deep understanding of AI vulnerabilities and experience in securing LLMs within cloud environments.
• Knowledge and experience in IT Security Best Practices, IT Governance and Audit Procedures.
• Knowledge of common information security frameworks and IT controls frameworks, such as ISO/IEC 27001, ITIL, COBIT/COSO and ones from NIST.
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
• Strong presentation skills for communicating architectural designs to executive leadership.
• Leadership skills, ability to motivate people.

Physical Demands

Duties of this position are performed in a normal office environment. Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required. Occasional overnight travel is required.

The stated range includes Base Salary and target Short-Term Incentive (STI) compensation only. A comprehensive benefits package is offered in addition to this range. The range described in this posting is an estimate by the Company, and may change based on several factors, including but not limited to a change in the duties covered by the job posting, or the credentials, experience or geographic jurisdiction of the successful candidate. Salary range $132,687 – $182,687 CAD.

Typical Experience

10+ years previous experience in a similar role/industry. Extensive hands-on experience designing and securing Google Cloud, Azure, and Google Workspace environments.

Typical Education

CISSP, CCSP (Certified Cloud Security Professional), or relevant cloud vendor certifications are a plus.

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.

Celestica is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. At Celestica we are committed to fostering an inclusive, accessible environment, where all employees and customers feel valued, respected and supported. Special arrangements can be made for candidates who need it throughout the hiring process. Please indicate your needs and we will work with you to meet them.