Every WestJet journey has the potential to enrich lives; a career with us is no exception.
WestJet arrived on the Canadian airline scene in 1996 and changed the industry for the better. We made air travel more affordable for Canadians and now were going global.
Join us and love where you’re going.
Remote Work:
This position is eligible for remote work, within Canada, under our mobile workforce program.
Overview of role:
The Senior Security Engineer, HSM, Certificate and Key Management is accountable for planning, designing, implementing, optimizing and supporting HSM, Certificate and Key Management technologies and processes. The role will be responsible for supporting current, and new initiatives, implementing cutting-edge security capabilities (controls, tools, processes), ensuring that our solutions and approach meet the highest security standards, while enforcing secure design principles and leveraging automation.
Key deliverables include:
- Works to Design, develop, test, implement & maintain security platforms to meet requirements for security functionality, performance, scalability and resiliency
- Works with broad expertise and unique knowledge in Information Security and uses skills to identify Information Security related threats and controls to achieve organizational goals in creative and effective ways
- Applies advanced in-depth and/or broad knowledge and considered a top resource across the organization for security
- Acts in an advisory capacity to business unit owners and technology stakeholders with respect to endpoint security matters and best practices
- Makes decisions on highly complex issues and provides direction regarding approach when it relates to encryption (applications and services) and cryptography
- Supports HSM, Certificate & Key Management
- Influences strategy and roadmap, for enterprise key and certificate management, hardware security modules
- Supports Application, service onboarding and cloud integration.
- Works closely with product, platform and architecture teams to engineer and help implement appropriate cryptographic controls
- Continuously analyzes endpoint security platforms and capabilities to detect critical deficiencies
- Work assignments involve highly complex issues where the analysis of situations or data requires an in-depth evaluation of intangibles or unprecedented situations
- Supports procedures to implement and automate security tasks
- Serves as an advisor to management and drives appropriate actions, while ensuring implementation of compliance and communication protocols
- Frequently takes full ownership of difficult assignments
- Provides cryptographic guidance and solutions for file, disk, database encryption, on-premises and cloud.
- Achieves goals in creative and novel ways, operating with significant autonomy
- Performs detailed design reviews and make recommendations for security enhancements.
- Identifies issues, common patterns, and opportunities for improvement
- Produces technical documentations, security design and delivers technical presentations in a clear and concise manner
- Introduces specialized concepts to develop innovative business solutions. Serves as an advisor, mentor, and helps drive new initiatives
- Often operates in ambiguous situations and provides innovative and technical guidance to others
- Maintains adequate documentation of security related configurations, capabilities and controls
Experience and qualifications:
- Typically requires a Master’s Degree in Computer Science, Engineering, Information Systems or Information Security and 8+ years of experience, or an equivalent combination of training and experience
- A minimum of 1 information security certification is required e.g. GIAC, CISSP or equivalent demonstrated subject matter experience
- Requires expert problem-solving skills and advanced interpersonal and communication skills including influencing others
- Strong knowledge of at least 1 of the following Engineering, deployment, and operations of HSM and Certificate and Key Management
- Strong understanding of security by design methodologies applied to technology, security services and integration patterns
- Knowledge of scripting languages (at least 1 of the following: Python, Bash, Ruby, Perl, Groovy, Powershell)
- Strong knowledge of product evaluation and selection process
- Demonstrates strong experience with building and operating Certificate Authorities, Certificate enrollment, Certificate services
- Experience supporting and maintaining Certificate Management technologies, Key Management Services, Hardware Security Modules
- Experience developing policies, procedures related to cryptography, certificate management and HSM.
- Practical experience of cryptographic services and HSM, CKM governance processes
- Excellent knowledge of Information Security risk, and industry best practices and applicable regulatory requirements, including PCI, PIPEDA, GDPR, CCPA
- Strong knowledge of platform configuration, fine-tuning, optimization, and maintenance
- Practical experience automating provisioning and management of resources
- Possess excellent project management and time management skills
The benefits of being a WestJetter:
WestJet provides all WestJetters with a competitive total rewards package. On top of that, we offer:
- A fun and friendly culture with colleagues who work together to win
- Travel privileges for you and your family, effective from your start date
- Savings and Benefit programs that are flexible to meet your specific needs
Think we are a fit? Apply now!
About WestJet Group of Companies
Together with WestJets regional airline, WestJet Encore, we offer scheduled service to more than 100 destinations in North America, Central America, the Caribbean and Europe and to more than 175 destinations in over 20 countries through our airline partnerships.
Our Safety Promise
At WestJet, the safety and security of our people and our guests is a core value and at the heart of what we do. As safety and security is a shared responsibility, it is expected that you will use safe work practices to ensure your well-being and the safety of others.
WestJet recognizes that the use of Alcohol and Drugs can adversely impact a safe work environment and the well-being of others including guests, suppliers and the public, as well as place WestJets operations at risk. All roles that are identified as safety sensitive are required to pass a Pre-Employment Alcohol and Drug Test as per WestJets Alcohol and Drug Policy.
Our Commitment to Diversity and Inclusion
We embrace what makes us each unique, and what makes us uniquely WestJet. WestJet is committed to inclusiveness, equity, and accessibility and if you require accommodation during the selection process, please let our Talent Acquisition team know. We encourage all qualified candidates to apply. We thank all applicants for their interest in WestJet; however, only those candidates who are selected will be contacted.
For more information about everything WestJet, please visit WestJet.com.
LI-Remote
LI-RM1
