Senior DevSecOps Engineer

TL;DR

Senior DevSecOps Engineer (AI-First)

📍 Montreal | Hybrid (Tues–Thurs in office)

❄️ Build and secure the cloud + Snowflake infrastructure powering one of only 3 Snowflake Native Apps in the world

💡 Become the infrastructure guardian of enterprise AI

Secure the Infrastructure Enterprises Trust

Maxa, an AI-first company, is hiring a Senior DevSecOps Engineer to build and secure the cloud and Snowflake foundations behind our finance-grade AI products.

Maxa Analyst is the world’s first auditable finance AI analyst, delivering CFO-ready, audit-proof answers in seconds.

The infrastructure behind it must be ultra-reliable, secure, observable, and scalable—and that’s where you come in.

As an early member of our DevSecOps function, you’ll shape our infrastructure strategy, own core operational systems, and work alongside experts building next-generation Snowflake Native Apps.

Everything is being built from the ground up.

The Impact You’ll Make

You’ll work at the intersection of cloud engineering, security, and data platform operations, partnering with Product, Engineering, and Data teams to design, automate, and secure our cloud + Snowflake environments.

You will:

Keep mission-critical infrastructure running flawlessly

• Ensure reliability across GCP (or AWS/Azure)
• Maintain our 99.9% uptime SLA
• Manage Snowflake infrastructure + deploy Snowflake Native Apps to customer accounts

Build automation foundations that accelerate product velocity

• Create & optimize CI/CD pipelines
• Implement GitOps workflows (ArgoCD, GitHub Actions)
• Use Terraform/IaC to build scalable infrastructures
• Build automated test frameworks for infrastructure changes
• Leverage advanced tooling, including agentic AI and coding assistants

Become a cornerstone of security & compliance

• Enforce best-practice cloud & Snowflake security
• Implement Zero Trust Architecture
• Manage secrets (Vault, GCP Secret Manager, etc.)
• Support audits and secure-by-default patterns

Drive reliability culture across engineering

• Lead incident response & root-cause analysis
• Partner with developers & data engineers
• Mentor junior CloudOps engineers

You’re the Right Fit If You Have…

Core Infrastructure Expertise (5+ years)

• Deep hands-on DevSecOps / CloudOps / infrastructure engineering experience
• Terraform expertise
• Cloud fundamentals across IAM, networking, workload identity, security (GCP preferred)
• Production experience with Kubernetes, Docker, VPCs, firewalls, load balancers
• GitOps + CI/CD tooling
• Observability tools (Prometheus, Grafana, Cloud Monitoring)

Snowflake / Data Platform Experience

Either:

• Snowflake (or BigQuery/Redshift/Databricks) experience
• SQL + data operations literacy

Or:

• Strong infrastructure engineer eager to become a Snowflake expert (training provided)

Additional Strengths

• Python scripting
• Bash/shell scripting
• Infra testing frameworks
• Understanding of distributed systems

This Role Is NOT for You If…

• You prefer a fully built, mature DevOps environment
• You want narrow specialization rather than broad Cloud + Snowflake ownership
• You want to avoid security responsibilities
• High-stakes production environments feel uncomfortable
• You prefer minimal cross-team collaboration

What We Offer

• Competitive base salary (newly created role)
• 4 weeks vacation year one, 5 weeks after
• RRSP employer contribution after 3 months
• On-site chef: 3-course lunches for $12
• Stock options in a post–Series A AI company
• Opportunity to define the infrastructure standards for enterprise AI

Your First Weeks

You’ll join the Infrastructure & DevSecOps group under Bruno Hivert, DevOps, Security & Infrastructure Team Lead.

In your first days:

• Full access to cloud + Snowflake environments
• Introduction to Snowflake Native App customers & deployment flows
• Start refining IaC standards, CI/CD pipelines, and observability setup

By week 2:

• Deploying updates to Snowflake Native Apps
• Leading improvements across monitoring, security posture, and automation
• Directly impacting customer reliability and product velocity

Recruitment Process

1. Screening with Gen (30 min, GMeet)
2. Hiring Manager Interview with Bruno + Raya (45 min, GMeet)
3. Technical Deep Dive (90 min, in-person)

• Cloud & infra architecture
• IaC, CI/CD, monitoring, Snowflake operations

Timeline: ~2–3 weeks from application to offer