Director of Security Engineering and SRE - Montréal, QC, Canada - AlayaCare

Description

Director of Security Engineering and SRE AlayaCare

View company page

AlayaCare is revolutionizing the way home health care is delivered. Our leading cloud -based software allows our clients around the world to manage their employees, scheduling, billing, and enable better delivery of care. We are a fast-growing SaaS company with a team of 550+ team members across Canada, US, Australia, and Brazil. We aim to be the world leader in home healthcare software solutions. We pride ourselves on our open and transparent culture, our bias for action, and being committed to a workplace where we can be ourselves.

About the Role:

Are you eager to contribute to the advancement of health technology by joining one of its leading innovators? AlayaCare is on the cusp of a home healthcare revolution, and your expertise could help shape the software platform driving this change. If you're passionate about cloud-native and security engineering, we want to hear from you. Keep reading to learn more.

AlayaCare is looking for an enthusiastic and pragmatic Director of Security Engineering and SRE. Reporting to the SVP of Engineering, you will work closely with the Chief Architect and all Engineering Directors and Managers.

The mission is two folds. Firstly, you'll focus on streamlining processes for our end-to-end product teams, enabling them to deliver high-quality, secure solutions efficiently, and facilitating rapid experimentation. Secondly, you'll be dedicated to maintaining the security and availability of the AlayaCare Cloud SaaS platform and its data.

Within the Site Reliability Engineering domain, you will lead a team responsible for maintaining the uptime and security of our business-critical home care and home health systems. Operating on a follow-the-sun model spanning Canada East & West, Brazil, and Australia, this team automates environment management, acts as first responders to production incidents, and owns the Cloud Architecture and infrastructure roadmap.

In the realm of Security Engineering, you will champion a proactive approach to Secure SDLC and Application security, improving SOC2 and HIPAA controls in an automated manner, and promoting best practices for Cloud Security and DevSecOps throughout the organization.

Join us in shaping the future of healthcare technology and making a meaningful impact on the lives of millions.

A day in the life:

• Define and drive the vision and execution of the roadmap for the Cloud Infrastructure and the Security Engineering, ensuring timely and budget-conscious delivery.
• Continuously challenge the status-quo by regularly updating the long-term vision every 12-18 months and propose actionable steps to implement this change.
• Oversee Application Security and Secure Software Development Lifecycle, SOC2, HIPAA or equivalent controls implementation such as access controls, BCP/DRP, hardening containers and more.
• Organize and lead the monthly security committee meetings.
• Manage security monitoring and incident response processes, ensuring swift and effective action in the event of security incidents.
• Technology: In collaboration with the Chief architects and principals, constantly assess the technology choices and evaluate replacements. Ensure the cloud infrastructure architecture is known, intentional, and documented.
• Cost Optimization: Expose trade-offs of cost vs availability vs performance vs security, and track AWS cost and continuously look for ways to optimize them.
• Foster the development of high-performing teams, providing coaching and guidance to team leaders and senior staff to support their professional growth and excellence.
• Establish clear expectations for everyone in your group by defining clear objectives, results, and metrics in an OKR and KPI approach.
• Communication from the top to explain strategy, and bottom-up to expose issues and provide recommendations to fix them.
• Foster Collaboration between your team and other departments, promoting cross-functional teamwork and knowledge sharing
• Continuously refine and simplify existing processes, in a pragmatic way to limit the number of processes and maximize operational efficiency without impeding business agility.
• Budget and vendors management
  • Defining and managing the budget.
  • Managing vendors agreements with the procurement function.
  • Leveraging vendors knowledge to help us achieve our outcomes, and constantly look for ways to reduce or eliminate costs.

What you bring to the team:

• 15+ years in software engineering, including 10+ in a leadership position.
• 5+ years in cloud engineering environment in a continuous delivery environment.
• 5+ years exposed to Information Security preferably for a SaaS company.
• A talent magnet - recruiting, growing, and leading people.
• You have done it scaled Cloud Engineering, ensured proper built-in quality in the development workflow, drove constant improvement of security in both the SDLC and the Cloud. Preferably have some AWS Cloud certifications.
• Great understanding of SaaS Security in a SOC2, HIPAA or equivalent compliance driven environments, you know SIEM , Hardening, PenTest, AuthZ/AuthN, OWASP Top 10, DevSecOops, BCP/DRP, and incident response - preferably have some Security certification like a CISSP;
• Excellent interpersonal, collaboration and communication skills;
• Firm believer of "everything as code", moving quality and security to the left;
• Able to explain to a 6-year-old child the difference between IaaS and PaaS, and how to build quality and secure software;
• Familiar with our tech stack of AWS, EKS, K8s, ArgoCD, Microservices Python & JS;
• Experience in fast-growing SaaS start-ups, and/or scale-up;
• You have read and loved these books: "Accelerate, the science of DevOps", "Continuous Delivery: Reliable Software Releases through Build, Test, and Deployment Automation", "The DevOps Handbook", "The Phoenix Project", "Team Topologies", "Site Reliability Engineering", "Infrastructure as Code", "Building Secure and Reliable Systems" and few others.

Location, and in-office requirements:

AlayaCare supports a flexible hybrid working model, expecting that our employees have a regular in-office presence at their closest office location while offering flexibility for some remote work. Our team encourages in-person collaboration and with this, the preferred candidate location for this position would be within the Greater Montreal Area.

What Makes AlayaCare a Great Place to Work:

• Our products have a positive impact on the lives of countless care workers and care recipients Equity in a well-funded, high-growth company
• Work where you feel most engaged and productive with our Superflex working models, whether that be at home or in one of our beautiful offices
• Competitive compensation including equity in a growing, well-funded company
• Comprehensive group benefits program, including telemedicine, effective on your first day
• Employee expense program for health, wellness, lifestyle, productivity expenses and more
• Parental leave top-up plan
• Flexible vacation policy
• Wellness Fridays for extra time to unwind
• Paid Volunteer Time off Program
• Career growth and development opportunities
• An entrepreneurial culture of transparency, collaboration, and innovation
• We are recognized as Deloitte's Technology Fast 50TM program award for our rapid revenue growth, entrepreneurial spirit, and bold innovation

If this sounds like the perfect job for you, apply today. As well as joining a great culture and a market-leading company, you will be part of a team making a positive difference in the post-acute care market. If this isn't the job for you, you may know someone who is a perfect fit. Please feel free to share this opportunity.

If you want to explore AlayaCare further, please visit our website .

Better outcomes, better belonging

Our team members are unique—like our products and the customer groups that we service.AlayaCareemployees bring different strengths, perspectives, and experiences to their roles and to our products that enable better care. We are committed to offering a people-centric culture where all employees belong and feel heard.

Having a pulse on our employee feedback is important to us as we aim to continuously evolve Diversity, Equity, Inclusion, Belonging, and Accessibility within AlayaCare's policies, total rewards offerings, discussions, learning & development programs, and community partnerships. All qualified applicants will receive equal consideration.

If you require accommodation as part of the recruitment and selection process, please reach out to . Please note, we do not accept unsolicited headhunter or agency resumes.

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.