Security & Reliability Engineer in Toronto

Design and implement the security architecture, access controls, and reliability controls that protect enterprise platforms and their data. Quix is looking for a Security & Reliability Engineer who can operate at the intersection of infrastructure security, application security, and operational reliability. This role is for someone who understands that security and reliability are not separate concerns — they are properties of the same well-engineered system — and who has the depth to identify risk, design controls, and implement them at every layer of the stack.

Work is calm, technical, and delivery-focused. You’ll help teams make durable decisions in enterprise environments where reliability and operational clarity matter.

What You’ll Do

• Assess and improve security posture across cloud infrastructure, application layers, and integration boundaries.
• Design and implement identity and access management controls: RBAC, least-privilege policies, and service account governance.
• Conduct threat modeling and security review of new systems, integrations, and architectural changes.
• Establish vulnerability management practices: scanning, triage, remediation tracking, and disclosure handling.
• Build security monitoring, alerting, and incident response capabilities aligned with enterprise operational requirements.
• Collaborate with infrastructure and engineering teams to embed security controls into deployment and delivery pipelines.
• Produce security architecture documentation, risk assessments, and compliance evidence for regulated client environments.

What We’re Looking For

• Strong experience in security engineering, infrastructure security, or application security roles.
• Deep understanding of cloud security architecture: IAM, network segmentation, encryption, secret management, and audit logging.
• Experience with threat modeling methodologies and security review processes.
• Proficiency with security tooling: SIEM, CSPM, vulnerability scanners, and application security testing tools.
• Understanding of relevant compliance frameworks: SOC 2, ISO 27001, PIPEDA, or equivalent.
• Ability to communicate security risk clearly to engineering, delivery, and executive stakeholders.

Nice to Have

• Security certifications: CISSP, CCSP, CEH, or cloud security specializations.
• Experience with DevSecOps practices and security automation in CI/CD pipelines.
• Background in penetration testing, red team exercises, or security assessment engagements.

Security and reliability failures in enterprise environments carry significant operational, reputational, and regulatory consequences. This role reduces that risk through proactive architectural controls, systematic vulnerability management, and the operational monitoring required to detect and respond to incidents before they escape.