Senior DevSecOps Engineer

Company Description

At Sleep Country Canada/Dormez-vous? (SCC/DV), we are inspired every day through our purpose to transform lives by awakening Canadians to the power of sleep and our vision to champion sleep as the key to healthier and happier lives, helping everyone achieve better tomorrows through better tonight’s.

Guided by our values – We CARE About People; We WIN Together; We DREAM Big and We DELIVER with Excellence – we are building on our 30-year foundation of taking care of each other and our customers’ sleep needs, with passion and commitment to be the best that we can be. We invest in our sleep ecosystem, innovative products, world-class customer experience, our communities and diverse best-in-class team to be Canada’s leading sleep partner.

We’re looking for a Senior DevSecOps Engineer to join our growing company and play a key role in our customer experience by ensuring each purchase ends in a smile!

Job Description

As a Senior DevSecOps Engineer at Sleep Country, you will be at the forefront of our DevOps and security efforts, specializing in the administration, day to day operations and security of our ecosystem, with a particular focus on Oracle and Google Cloud environments. This role requires a deep understanding of Oracle technologies and applications, as well as strong leadership and problem-solving skills. You will mature our monitoring and alerting platforms while ensuring the operability, security and compliance of our cloud-based applications and services.

Responsibilities of this role will include but are not limited to:

• Oversight, development, maintenance of all aspects of DevSecOps, such as the pipeline management, logging, monitoring, and security tooling
• Work closely with our on and offshore teams to ensure that our Oracle Retail Process Orchestration and Monitoring (POM) processes are operational
• Monitoring: Maintenance and development of our monitoring and alerting platforms
• API Administration: Oversee the administration of the Apigee API management platform, ensuring secure API development, deployment, and lifecycle management.
• Data Protection: Develop and enforce policies and procedures for data protection, compliance, and privacy in alignment with GDPR, CCPA, and other relevant regulations.
• Security: Design and implement robust security practices for cloud and hybrid systems, with a focus on minimizing risks and vulnerabilities.
• Assist with the development and implementation of security policies, controls, and best practices for our Google Cloud Platform (GCP) environment.
• Incident Response: Lead and participate incident response activities related to cloud and API security, including investigation, mitigation, and recovery processes.
• Stakeholder Engagement: Collaborate with IT, development, and business teams to integrate DevSecOps considerations into technology and business initiatives.
• Innovation and Research: Stay abreast of the latest cloud technologies, trends, and threats; recommend and implement innovative DevSecOps solutions.
• Assist application teams with on-boarding to the adopted DevSecOps tools/technologies; working with vendors to troubleshoot the platform and issues related to such integrations.
• Ensure deliverables are completed within target timeframes and are consistently of high-quality, documented and support transition of operational activities.

Qualifications

The Qualifications and Experience we like to see:

• Bachelor’s degree in computer science, information systems, or a related field, or equivalent education-related experience.
• A minimum of seven years of experience in DevSecOps, with at least three years focused on cloud operations, security, and cloud management.
• At least three years of development experience in object-oriented programming languages
• Proven track record of working with teams on multi-tiered, complex distributed web applications.
• Proficiency in working with CI/CD tools.
• Familiarity with project management tools
• Experience with enterprise monitoring/alerting tools
• Practical experience with infrastructure as code tools
• Understanding of Test or Behavior Driven Development.
• Familiarity with Agile, SAFe, and DevSecOps methodologies.
• General familiarity with data protection laws and regulations (GDPR, CCPA) and experience with compliance frameworks (ISO, NIST).
• Excellent written and verbal communication skills, with the ability to convey strategic information, security, and operational topics, policies, and standards as well as risk-related concepts to both technical and non-technical audiences.

Key Technologies:

• Oracle Cloud Infrastructure, Oracle Retail Cloud, Oracle Retail Merchandising
• Expertise in Google Cloud Platform and Apigee, CloudRun/CloudBuild, GKE, CloudSQL, with relevant certifications such as Google Cloud Professional Security Engineer and Apigee Certified API Engineer
• Java SpringBoot or similar build and test tools.
• Jira Software Management, Confluence
• Dynatrace Performance Monitoring and PagerDuty Operations for incident response
• Hands-on experience with Git, GitLab/GitHub/CloudBuild, Kubernetes deployment, Terraform and other Agile CI/CD

Additional Information

Why members of our Corporate team love working at Sleep Country Canada/Dormez-vous?:

• This is not a job but a CAREER with opportunities for growth and advancement
• Diverse and inclusive work environment
• We will invest in you and provide extensive training, mentoring and continuous development
• Access to training and development platforms
• Full medical, dental benefits and a Deferred Profit Sharing Program
• Annual Wellness Credit of up to $250.00 for any products/services that improve your health and well-being, i.e., health assessments, nutrition counselling, hiking shoes, a yoga outfit or fitness equipment!
• Associate Discount Program where you will be able to enjoy some of the world’s best sleep products
• Maternity/Parental leave top up benefits
• Tuition Reimbursement Program that covers professional AND personal development
• Long service awards, celebrations and other social events
• Associate Referral Program
• Paid day off to volunteer at your local charity of choice
• Recognized as one of Canada’s Most Admired Corporate Cultures in 2023 by Waterstone Human Capital

Commitment to Equity, Diversity, Inclusion & Belonging (EDI&B)

At SCC/DV, we are committed to building a company culture of inclusion and diversity where differences are embraced and valued, this allows us to better understand and meet the needs of our customers and the communities we serve. We want to ensure every job applicant is treated fairly and with respect regarding race, national or ethnic origin, religion, age, gender, sexual orientation, or disability.

About Sleep Country Canada/Dormez-vous?

Sleep Country is Canada’s leading specialty sleep retailer with a purpose to transform lives by awakening Canadians to the power of sleep. Sleep Country Canada operates under the retailer banners; Sleep Country, Dormez-vous, the rest, Endy, Hush, Silk & Snow and most recently acquired, Casper Canada. The Company has omnichannel and ecommerce operations including over 300 corporate-owned stores and 18 distribution centers warehouses across Canada. Recognized as one of Canada’s Most Admired Corporate Cultures in 2023 by Waterstone Human Capital, Sleep Country is committed to building a company culture of inclusion and diversity where differences are embraced and valued. The Company actively invests in its sleep ecosystem, innovative products, world-class customer experience, communities and its people. For more information about Sleep Country, please visit www.sleepcountry.ca.