Security Automation Engineer, 18-month Term

Kinaxis is a global leader in modern supply chain orchestration, and they are seeking a Security Automation Engineer to design, build, and operate automated security capabilities across a hybrid enterprise environment. The role focuses on eliminating manual security efforts by embedding security guardrails, detections, and remediation directly into platforms, pipelines, and operational workflows.

Responsibilities:

• Design and implement event-driven, API-first security automation for detection, response, and preventative controls
• Build reusable automation frameworks and libraries to enforce security standards across environments
• Replace manual security processes with code, workflows, and orchestration integrated into enterprise platforms
• Enforce security guardrails via policy‑as‑code (OPA/Gatekeeper, Terraform, Sentinel, cloud-native policy engines)
• Automate scanning, validation, approval gates, and auto-remediation for IaC drift and misconfigurations
• Develop secure, IaC modules that embed security by default
• Automate cluster and workload hardening (RBAC validation, admission control, policy enforcement)
• Integrate image scanning, signing, and deployment validation into CI/CD
• Automate runtime signal collection and response for container workloads CI/CD & Software Supply Chain Security
• Embed security automation into CI/CD pipelines (SAST, SCA, DAST, secrets detection, IaC scanning)
• Implement policy‑based gates and automated failure handling
• Automate SBOM generation, artifact signing, provenance checks, and attestation enforcement
• Automate GitHub Enterprise security controls: including repository standards, branch protections, code scanning, secret scanning, and dependency management
• Enforce least‑privilege access and token hygiene via automation
• Integrate GitHub security telemetry into SIEM and SOAR pipelines
• Automate Databricks workspace and cluster security (policies, permissions, secret scopes, token lifecycle)
• Enforce data access guardrails and monitor for anomalous behavior
• Integrate Databricks telemetry into centralized logging and detection systems
• Build automated pipelines that prioritize, route, and remediate vulnerabilities based on risk context
• Integrate vulnerability data with ticketing, CI/CD, and config management systems
• Develop self‑service remediation workflows for engineering teams
• Design and develop SOAR playbooks and automations for common and high‑impact security events
• Integrate signals from cloud platforms, endpoints, identity systems, Kubernetes, and CI/CD into SIEM
• Continuously tune detections to improve signal quality, reduce noise, and support analyst efficiency
• Embed automated security checks into change management workflows, including pre‑change validation and post‑change verification

Requirements:

• Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent practical experience
• 5–7+ years of experience in security engineering, site reliability engineering (SRE), or software engineering with a strong security focus
• Strong software engineering mindset with the ability to design, build, and operate production systems
• Proven ability to balance security rigor with delivery speed and business outcomes
• Experience operating production‑grade systems with uptime, telemetry, and reliability requirements
• Strong collaboration skills with a demonstrated ability to enable engineering teams rather than block delivery
• Excellent written and verbal communication skills, with the ability to clearly articulate complex technical concepts
• Ability to work effectively in a fast‑paced, global environment with shifting priorities
• Strong software engineering skills: Python (preferred), Go or Java; REST APIs; event‑driven systems
• Infrastructure as Code (Terraform, CloudFormation etc.) with policy‑as‑code enforcement
• Strong knowledge of CI/CD security automation (GitHub Actions, Azure DevOps, GitLab)
• Hands-on experience with Kubernetes security (admission control, PSS, network policy, signing, runtime security)
• GitHub Enterprise security configuration and automation
• Databricks security architecture and automation
• AI / LLM workload security and usage controls
• Vulnerability management automation and remediation pipelines
• Identity‑first security (IAM, workload identity, key & secret lifecycle)
• CCSP, CISSP, CKS
• Azure or GCP Security Specialty
• GIAC certifications relevant to cloud or automation security