Senior Security Platform Engineer

at  Sun Life

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You’ll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you’ll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world.

JOB DESCRIPTION:

The Senior Security Platform Engineer is responsible for effectively planning, designing, implementing, and monitoring security technologies and projects that support Sun Life’s security policies and procedures. Your primary responsibilities will be Supporting in Scope Platform and Products and developing use case scenarios, enhancing the security of Sun Life’s corporate and production systems. You will work closely with Enterprise Infrastructure, IT operations, Enterprise Architecture, and application development teams to identify risks to the business and lead security solutions to protect customer and financial information.
The successful candidate must be able to interpret complex information, adapt as needed and have a deep understanding of security risks, data impact and controls to help mitigate the risk and provide countermeasures.
A Senior Security Platform Engineer is a leader who is expected to participate fully in the planning of the work and to seek opportunities for process improvement. The successful candidate is strong in multiple Information Security domains and is expected to lead the efforts to solve complex security problems.

PREFERRED SKILLS:

• Problem Solving – Identifies and resolves problems in a timely manner; Gather and analyzes information skillfully; Develops alternative solutions. Exceptional troubleshooting skills
• Analytical – Synthesizes complex or diverse information; collects and researches data.
• Critical Thinking – Uses logic and reasoning to identify alternative solutions/approaches to problems.
• Technical Skills – Pursues training and development opportunities; Shares expertise with others; Sound knowledge of security technologies for both Cloud and On Premise
• Strong leadership and teamwork skills - Motivates others to perform well; effectively influences actions of others; accepts feedback from others.
• Ability to communicate complex approach to various stakeholders resulting in successful outcomes.
• Ability to communicate effectively with senior management and user community, both written and oral.
• Pragmatic understanding of security problems, as a mix of technology and process issues, with the ability to pursue solutions at both layers within the organization.
• Extensive knowledge of Information Security principles, protocols, practices, and industry standards
• Solid understanding of existing and emerging Information Security technologies
• Self- Starter, strategic thinker in maturing deployed security technologies to ensure full capabilities are explored to meet enterprise security requirements.
• Strong hands-on technical skills in both security risks and implementing solutions.
• Strong investigative mindset with acute attention to detail, sense of ownership, urgency, and drive.
• Candidates must be eligible for Reliability Status Clearance, which requires that they have lived and worked in Canada for the past 5 consecutive years.

• Deploy and manage one or more security platforms and tools: Perimeter, Endpoints, Crypto, Cloud, Email Security, and Security Visibility:
• Email and Anti Malware Security Technologies
• Cloud platforms security (CNAPP)
• Intrusion Detection/Prevention System
• Endpoint Security Solutions (Netskope, CrowdStrike, Semperis)
• Web Application Firewalls (WAF)
• Cryptography, Certificate and Key Management (Hashicorp, Venafi, ISG)
• Security Visibility (SIEM)
• Analyze information systems utilizing various cybersecurity techniques and lead security initiatives and enterprise level projects implementing security solutions and performing POC/POV for new technologies.
• Able to work independently with high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables, and build trust with internal clients and peers.
• Responsible to deploy, support and maintain new and existing security technologies that are deployed within Sun Life and owned and supported by the team.
• Implement risk driven security controls and provide SME (Subject Matter Expertise) during Audit.
• Investigate and respond to security incidents, adhering to defined SLA’s. Participate in teams 24x7 on-call support and be required to join major incident management calls to provide support and consultion.
• Identify risks to the business and recommend strategies to address those risks.
• Manage the capacity and resiliency of security systems protecting Sun Life’s internal and client data.
• Collaborate and build trust with security peers, vendors, and other Sun Life teams to enhance security posture and best practices.
• A change catalyst for Digital transformation, using JIRA, Confluence, estimating stories, setting definition of done, completing and tracking story updates and assignments.