DevSecOps Manager

Looking for a new challenge? Apply today! Our team is on construction vacation, but we will contact you upon our return.

Want to change the scenery?

At Annexair, you will contribute to the manufacturing of custom HVAC systems for some of the world's biggest players: Marriott, Facebook, and even Universal Studio.

Every project is unique. Every day has an impact.

In addition, your work contributes to more eco-friendly and sustainable solutions.

Stop looking, the next step starts here!

What we offer

• Exceptional cafeteria
• 2 weeks of closure during the summer & holiday period
• Group insurance
• Collective RÉER with employer contribution
• $500 employee referral bonus
• Personal days off
• Employee assistance program
• Clean, bright, and air-conditioned environment
• Active social club
• Your daily role

Reporting to the Vice President of IT, the DevSecOps Manager is responsible for designing, securing, and automating the development, application delivery, and operation of the company's digital systems. They act as a technical leader to integrate cybersecurity into the entire lifecycle of technological solutions, while promoting automation, software quality, and operational agility. The role holder works closely with development, infrastructure, cybersecurity, ERP, data, and digital transformation teams.

DevSecOps Governance

• Define and maintain the company's DevSecOps strategy
• Establish secure development standards and practices
• Ensure the application of best practices in DevOps and cybersecurity
• Implement and track performance (KPI) and maturity indicators

Development and Continuous Integration

• Design and maintain CI/CD platforms
• Automate deployment processes
• Integrate quality and security controls into pipelines
• Standardize Git practices and source code management

Application Security

• Integrate security practices from the early stages of the development cycle ("Shift Left Security")
• Deploy, administer, and optimize SAST, DAST, and SCA tools
• Monitor vulnerability assessments
• Participate in code reviews and risk assessments
• Ensure compliance with requirements and frameworks such as NIST CSF

Cloud and Infrastructure

• Design secure architectures on Azure
• Deploy environments using Infrastructure as Code
• Administer cloud and hybrid environment automation
• Support teams in using containers and orchestrators

Continuous Improvement

• Identify automation opportunities
• Reduce deployment delays
• Improve platform resilience and reliability
• Maintain a technology watch in cybersecurity and automation

What you need to succeed

• Bachelor's degree in computer science, software engineering, or related field
• 8 to 12 years of experience in IT, with at least 5 years in DevOps, DevSecOps, or architecture roles
• Relevant certifications (Azure Solutions Architect, Azure DevOps Engineer Expert, CISSP, CCSP, TOGAF, or Kubernetes Administrator (asset))
• Experience in a manufacturing or industrial environment
• Experience with Microsoft platforms
• Excellent mastery of Azure DevOps and Git
• Strong knowledge of cybersecurity principles, including Microsoft Defender, Defender for Cloud, Microsoft Sentinel, OWASP, Zero Trust, IAM, and vulnerability management
• Good mastery of PowerShell, Python, and C# languages, as well as REST API development and integration
• Knowledge of Microsoft Azure, Azure Landing Zones, and Infrastructure as Code tools, including Terraform and Bicep