Security Automation Engineer, 18-month Term

About Kinaxis

Are you looking to join an innovative, market-leading company where you can truly elevate your career? At Kinaxis we are serious about culture, we are serious about technology, we are serious about customers, and we are serious about not taking ourselves too seriously. If you are looking to be part of an incredible growth story, then we might just be the place for you!

In 1984, we started out as a team of three engineers. Today, we have grown to become a global organization with over 2000 employees around the world, 6 global office and a best-in-class HQ in Ottawa, Canada. As winners of several Top Employer awards globally, we are proud to work with our customers and employees towards solving some of the biggest challenges facing supply chains today.

Kinaxis is a global leader in modern supply chain orchestration, powering complex global supply chains, and supporting the people who manage them. Our powerful, AI infused platform provides full transparency and visibility across end-to-end supply chains, enabling our customers to make faster, better decisions. We are trusted by renowned global brands to provide the agility and predictability needed to navigate today’s volatility and disruption.

With more than 40,000 users in over 100 countries, we are expanding our team as we continue to innovate and revolutionize how we support our customers.

Location Ottawa, Canada
- Hybrid
Other Canadian locations
- Remote

The Security Automation Engineer designs, builds, and operates automated security capabilities across a hybrid enterprise environment spanning on-premises infrastructure and public cloud platforms. This is a hands-on, builder-oriented role focused on eliminating manual security effort by embedding security guardrails, detections, and remediation directly into platforms, pipelines, and operational workflows.

In this role, you will own the automation and orchestration layer of the security program , working closely with infrastructure, platform, data, and application engineering teams to ensure security is continuous, scalable, and enforced through code . You will have strong software engineering experience with deep security domain expertise across cloud, Kubernetes, CI/CD, data platforms, and modern AI workloads.

This is an existing job vacancy

What you will do

• Security Automation & Engineering:
  Design and implement event-driven, API-first security automation for detection, response, and preventative controls.
• Build reusable automation frameworks and libraries to enforce security standards across environments.
• Replace manual security processes with code, workflows, and orchestration integrated into enterprise platforms.

Infrastructure as Code (IaC) & Policy Automation

• Enforce security guardrails via policy ‑ as ‑ code (OPA/Gatekeeper, Terraform, Sentinel, cloud-native policy engines).
• Automate scanning, validation, approval gates, and auto-remediation for IaC drift and misconfigurations.
• Develop secure, IaC modules that embed security by default.

Container Security Automation

• Automate cluster and workload hardening (RBAC validation, admission control, policy enforcement).
• Integrate image scanning, signing, and deployment validation into CI/CD.
• Automate runtime signal collection and response for container workloads CI/CD & Software Supply Chain Security
• Embed security automation into CI/CD pipelines (SAST, SCA, DAST, secrets detection, IaC scanning).
• Implement policy ‑ based gates and automated failure handling.
• Automate SBOM generation, artifact signing, provenance checks, and attestation enforcement.

Git Hub Security Engineering

• Automate Git Hub Enterprise security controls: including repository standards, branch protections, code scanning, secret scanning, and dependency management.
• Enforce least ‑ privilege access and token hygiene via automation.
• Integrate Git Hub security telemetry into SIEM and SOAR pipelines.

Databricks & Data Platform Security

• Automate Databricks workspace and cluster security (policies, permissions, secret scopes, token lifecycle).
• Enforce data access guardrails and monitor for anomalous behavior.
• Integrate Databricks telemetry into centralized logging and…