Sr Security Platform Engineer

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Position Summary:

The Senior Security Platform Engineer is responsible for designing, implementing, supporting, and continuously enhancing Sun Life’s enterprise cryptographic security platforms, including CyberArk Machine Identity Security (Venafi), ISG Crypto Vulnerability Scanner, and HashiCorp Vault. You will work closely with infrastructure, architecture, operations, and application development teams to identify security risks and deliver solutions that protect customer and financial information.

The successful candidate will bring strong expertise in cryptographic security platforms, a deep understanding of security risks and controls, and a passion for continuous improvement. You will also participate in operational support activities, including incident response and on-call rotations.

What will you do?

• Operate, maintain, and innovate across Cryptographic platforms particularly ISG Crypto Vulnerability Scanner and CyberArk Machine Identity Security (formerly called Venafi TPP).
• Design and implement automation and integration solutions to improve platform scalability, operational efficiency, and security outcomes.
• Deploy, support, and maintain new and existing security technologies that are deployed within Sun Life and owned by the team.
• Analyze information systems utilizing various cybersecurity techniques and lead security initiatives and enterprise level projects implementing security solutions and performing POC/POV for new technologies.
• Work independently with high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables, and build trust with internal clients and peers. 
• Implement risk driven security controls and provide SME (Subject Matter Expertise) during Audit.
• Investigate and respond to security incidents, adhering to defined SLA’s. Participate in teams 24x7 on-call support and be required to join major incident management calls to provide support and consultation.
• Identify risks to the business and recommend strategies to address those risks.
• Manage the capacity and resiliency of security systems protecting Sun Life’s internal and client data.
• Collaborate and build trust with security peers, vendors, and other Sun Life teams to enhance security posture and best practices.
• Serve as a change catalyst for Digital transformation, using JIRA, Confluence, estimating stories, setting definition of done, completing, and tracking story updates and assignments.
• Smoothly transition and operationalize projects and products. This includes developing roles & responsibilities (RACI), completing product documentation and educating the teams who will be performing BAU (Business as usual) the day-to-day work.
• Document, update, and maintain cyber security playbooks, policies and knowledge base articles used to support the established Incident Management and CSIRT processes.

What you’ll need to succeed?

• Pragmatic understanding of security challenges as a combination of technology and process issues, with the ability to drive solutions across both.
• Strong Infrastructure/DevOps foundation, including Linux, Windows, Active Directory, SSO, authentication and authorization protocols, AWS, Azure, databases, Splunk, ServiceNow, and Jira.
• Proven expertise with cryptographic security platforms, including CyberArk MIS (Venafi), ISG Crypto Vulnerability Scanner, and HashiCorp Vault, as well as enterprise PKI, SSL/TLS certificate lifecycle management, and machine identity security.
• Extensive knowledge of information security principles, industry standards, security controls, risk management frameworks (NIST, ISO 2700x), and vulnerability remediation.
• Experience with cloud and container technologies, including AWS, Kubernetes, OpenShift, and EKS.
• Experience with security operations, including incident response, detection engineering, endpoint security, intrusion detection, and email security technologies.
• Knowledge of networking technologies, load balancers, firewalls, web application firewalls, and intrusion detection/prevention systems.
• Self-starter with a strategic mindset and a track record of maturing security technologies to meet evolving enterprise requirements.
• Strong investigative, analytical, and problem-solving skills with a sense of ownership and urgency.
• Minimum 5-7 years of information security and engineering experience with enterprise security technologies, including cryptography and machine identity security.
• Minimum 3 years of experience leading global information security projects and managing third-party security service providers.
• Experience deploying enterprise technologies using Agile methodologies, including Scrum and Kanban.
• Bachelor's degree, college diploma, or equivalent work experience in a related discipline.
• Strong oral and written communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.
• Preferred certifications: CISSP, CCSP, GIAC, CompTIA, CCNP Security, or equivalent.

What’s in it for you?

• A competitive salary and bonus program, based on market scale
• A flexible group insurance program starting on your first day of work to meet your needs and those of your family.
• Our Share Ownership Program gives you the opportunity to invest in Sun Life while benefiting from employer matching contributions.
• We are proud to be included in Great Place to Work's 2026 list of Canada's Best Workplaces.

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to thebrightside@sunlife.com.

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

Job Category:

Posting End Date: