Senior DevSecOps Engineer

TL;DR

Senior DevSecOps Engineer (AI-First)

Montreal | Hybrid (Tues–Thurs in office)

Build and secure the cloud + Snowflake infrastructure powering
one of only 3 Snowflake Native Apps in the world

Become the infrastructure guardian of enterprise AI

Secure the Infrastructure Enterprises Trust

Maxa, an AI-first company, is hiring a
Senior DevSecOps Engineer
to build and secure the cloud and Snowflake foundations behind our finance-grade AI products.

Maxa Analyst
is the world's first
auditable finance AI analyst
, delivering CFO-ready, audit-proof answers in seconds.

The infrastructure behind it must be
ultra-reliable, secure, observable, and scalable
—and that's where
you
come in.

As an early member of our DevSecOps function, you'll shape our infrastructure strategy, own core operational systems, and work alongside experts building next-generation Snowflake Native Apps.

Everything is being built from the ground up.

The Impact You'll Make

You'll work at the intersection of
cloud engineering
,
security
, and
data platform operations
, partnering with Product, Engineering, and Data teams to design, automate, and secure our cloud + Snowflake environments.

You will:

Keep mission-critical infrastructure running flawlessly

• Ensure reliability across GCP (or AWS/Azure)
• Maintain our
  99.9% uptime SLA
• Manage Snowflake infrastructure + deploy Snowflake Native Apps to customer accounts

Build automation foundations that accelerate product velocity

• Create & optimize CI/CD pipelines
• Implement GitOps workflows (ArgoCD, GitHub Actions)
• Use Terraform/IaC to build scalable infrastructures
• Build automated test frameworks for infrastructure changes
• Leverage advanced tooling, including
  agentic AI
  and coding assistants

Become a cornerstone of security & compliance

• Enforce best-practice cloud & Snowflake security
• Implement Zero Trust Architecture
• Manage secrets (Vault, GCP Secret Manager, etc.)
• Support audits and secure-by-default patterns

Drive reliability culture across engineering

• Lead incident response & root-cause analysis
• Partner with developers & data engineers
• Mentor junior CloudOps engineers

You're the Right Fit If You Have…

Core Infrastructure Expertise (5+ years)

• Deep hands-on DevSecOps / CloudOps / infrastructure engineering experience
• Terraform expertise
• Cloud fundamentals across IAM, networking, workload identity, security (GCP preferred)
• Production experience with Kubernetes, Docker, VPCs, firewalls, load balancers
• GitOps + CI/CD tooling
• Observability tools (Prometheus, Grafana, Cloud Monitoring)

Snowflake / Data Platform Experience

Either:

• Snowflake (or BigQuery/Redshift/Databricks) experience
• SQL + data operations literacy

Or:

• Strong infrastructure engineer eager to become a Snowflake expert (training provided)

Additional Strengths

• Python scripting
• Bash/shell scripting
• Infra testing frameworks
• Understanding of distributed systems

This Role Is NOT for You If…

• You prefer a fully built, mature DevOps environment
• You want narrow specialization rather than broad Cloud + Snowflake ownership
• You want to avoid security responsibilities
• High-stakes production environments feel uncomfortable
• You prefer minimal cross-team collaboration

What We Offer

• Competitive base salary (newly created role)
• 4 weeks vacation year one, 5 weeks after
• RRSP employer contribution after 3 months
• On-site chef:
  3-course lunches for $12
• Stock options in a post–Series A AI company
• Opportunity to define the infrastructure standards for enterprise AI

Your First Weeks

You'll join the Infrastructure & DevSecOps group under
Bruno Hivert
, DevOps, Security & Infrastructure Team Lead.

In your first days:

• Full access to cloud + Snowflake environments
• Introduction to Snowflake Native App customers & deployment flows
• Start refining IaC standards, CI/CD pipelines, and observability setup

By week 2:

• Deploying updates to Snowflake Native Apps
• Leading improvements across monitoring, security posture, and automation
• Directly impacting customer reliability and product velocity

Recruitment Process

1. Screening with Gen (30 min, GMeet)
2. Hiring Manager Interview with Bruno + Raya (45 min, GMeet)

3. Technical Deep Dive (90 min, in-person)

4. Cloud & infra architecture

5. IaC, CI/CD, monitoring, Snowflake operations

Timeline:
~2–3 weeks from application to offer