Sr Security Platform Engineer

You are as unique as your background experience and point of view. Here youll be encouraged empowered and challenged to be your best self. Youll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day youll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life were driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring authentic bold inspiring and impactful.

When you join Sun Life youll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions so you can make a meaningful difference in our Clients lives.

Discover how you can make a difference in the lives of individuals families and communities around the world.

Job Description:

Position Summary:

The Senior Security Platform Engineer is responsible for designing implementing supporting and continuously enhancing Sun Lifes enterprise cryptographic security platforms including CyberArk Machine Identity Security (Venafi) ISG Crypto Vulnerability Scanner and HashiCorp Vault. You will work closely with infrastructure architecture operations and application development teams to identify security risks and deliver solutions that protect customer and financial information.

The successful candidate will bring strong expertise in cryptographic security platforms a deep understanding of security risks and controls and a passion for continuous improvement. You will also participate in operational support activities including incident response and on-call rotations.

What will you do

• Operate maintain and innovate across Cryptographic platforms particularly ISG Crypto Vulnerability Scanner and CyberArk Machine Identity Security (formerly called Venafi TPP).
• Design and implement automation and integration solutions to improve platform scalability operational efficiency and security outcomes.
• Deploy support and maintain new and existing security technologies that are deployed within Sun Life and owned by the team.
• Analyze information systems utilizing various cybersecurity techniques and lead security initiatives and enterprise level projects implementing security solutions and performing POC/POV for new technologies.
• Work independently with high degree of ambiguity and deliver expected outcomes be focused on the end deliverables and build trust with internal clients and peers.
• Implement risk driven security controls and provide SME (Subject Matter Expertise) during Audit.
• Investigate and respond to security incidents adhering to defined SLAs. Participate in teams 24x7 on-call support and be required to join major incident management calls to provide support and consultation.
• Identify risks to the business and recommend strategies to address those risks.
• Manage the capacity and resiliency of security systems protecting Sun Lifes internal and client data.
• Collaborate and build trust with security peers vendors and other Sun Life teams to enhance security posture and best practices.
• Serve as a change catalyst for Digital transformation using JIRA Confluence estimating stories setting definition of done completing and tracking story updates and assignments.
• Smoothly transition and operationalize projects and products. This includes developing roles & responsibilities (RACI) completing product documentation and educating the teams who will be performing BAU (Business as usual) the day-to-day work.
• Document update and maintain cyber security playbooks policies and knowledge base articles used to support the established Incident Management and CSIRT processes.

What youll need to succeed

• Pragmatic understanding of security challenges as a combination of technology and process issues with the ability to drive solutions across both.
• Strong Infrastructure/DevOps foundation including Linux Windows Active Directory SSO authentication and authorization protocols AWS Azure databases Splunk ServiceNow and Jira.
• Proven expertise with cryptographic security platforms including CyberArk MIS (Venafi) ISG Crypto Vulnerability Scanner and HashiCorp Vault as well as enterprise PKI SSL/TLS certificate lifecycle management and machine identity security.
• Extensive knowledge of information security principles industry standards security controls risk management frameworks (NIST ISO 2700x) and vulnerability remediation.
• Experience with cloud and container technologies including AWS Kubernetes OpenShift and EKS.
• Experience with security operations including incident response detection engineering endpoint security intrusion detection and email security technologies.
• Knowledge of networking technologies load balancers firewalls web application firewalls and intrusion detection/prevention systems.
• Self-starter with a strategic mindset and a track record of maturing security technologies to meet evolving enterprise requirements.
• Strong investigative analytical and problem-solving skills with a sense of ownership and urgency.
• Minimum 5-7 years of information security and engineering experience with enterprise security technologies including cryptography and machine identity security.
• Minimum 3 years of experience leading global information security projects and managing third-party security service providers.
• Experience deploying enterprise technologies using Agile methodologies including Scrum and Kanban.
• Bachelors degree college diploma or equivalent work experience in a related discipline.
• Strong oral and written communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.
• Preferred certifications: CISSP CCSP GIAC CompTIA CCNP Security or equivalent.

Whats in it for you

• A competitive salary and bonus program based on market scale
• A flexible group insurance program starting on your first day of work to meet your needs and those of your family.
• Our Share Ownership Program gives you the opportunity to invest in Sun Life while benefiting from employer matching contributions.
• We are proud to be included in Great Place to Works 2026 list of Canadas Best Workplaces.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other addition to Base Pay eligible Sun Life employees participate in various incentive plans payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process or those needing job postings in an alternative format may e-mail a request to .

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business our Clients and you.

We may use artificial intelligence to support candidate sourcing screening interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

Job Category:

Posting End Date: