Controls engineer Jobs in Richmond, BC

THE ROLE

As the Senior Engineer/Engineer, Cybersecurity, you will:

• Configure, integrate, test, monitor, and improve enterprise security controls to meet defined security requirements, operational standards, and compliance obligations.
• Engineer, operate, and tune enterprise security tooling across EDR, SIEM, WAF, IAM, DLP, firewalls, secrets, and vulnerability management.
• Establish and maintain secure configuration baselines for Windows, Linux, cloud services, endpoints, network devices, applications, and supporting platforms.
• Implement least-privilege access, workload identity federation, credential rotation, and secure secrets management across applications and pipelines.
• Embed security controls across CI/CD pipelines, IaC, and deployment workflows, partnering with engineering teams to test and validate application and API security.
• Implement security controls for AI/agentic applications, including workload identities, tool permissions, trust boundaries, human-in-the-loop approvals, and untrusted-input testing.
• Ensure controls produce useful telemetry, logs, alerts, and evidence for security monitoring, incident response, investigations, and compliance obligations such as PCI DSS.
• Provide technical support during security incidents and investigations, participate in response and recovery activities, and contribute technical analysis to root cause identification and corrective actions.
• Support with evaluating new security technologies, integrations, and design patterns; conduct proof of concept testing and document findings; and support architecture and solution recommendations.
• Support with maintaining comprehensive technical documentation, including architecture diagrams, runbooks, standard operating procedures, and training materials.

THE QUALIFICATIONS

The Senior Engineer/Engineer, Cybersecurity has:

• Proven skills, certifications, education, and/or experience:Bachelor's degree in computer science, Software Engineering, Cybersecurity, or equivalent practical experience in full-stack software engineering and cloud security engineering.Hands-on experience implementing, automating, and supporting cloud services across Azure, GCP, or AWS, and administering Entra ID, Exchange Online, and Microsoft 365.Strong software engineering background with proficiency in Python and PowerShell. Extensive experience building automation, working with REST APIs, managing code in GitHub (Actions, Webhooks, Repositories), and embedding security into CI/CD pipelines.Hands-on experience enforcing policy, posture, and endpoint security across hybrid fleets using Microsoft Intune (Windows/iOS/Android) and Jamf Pro (macOS).Hands-on experience monitoring and hardening multi-cloud environments using CNAPP tooling (e.g., Wiz, Defender for Cloud, GCP Security Command Center), enforcing IaC policy-as-code, and building automated remediation workflows.Background in core security tooling (EDR, SIEM, WAF, DLP) and modern identity controls (Conditional Access policies and technical prerequisites), alongside experience converting recurring threat/vulnerability findings into automated engineering fixes.
• A commitment to learn and apply Aritzia's Business and People Leadership principles

THE COMPENSATION

At Aritzia, we provide market-leading compensation packages designed to reward impact through our pay-for-performance philosophy.

The range for roles at this level is $100,000–$300,000 per year. Total compensation may include base, bonus and/or equity depending on the role, which has the potential to be greater than this range.

With comprehensive benefits, aspirational workspaces, and elevated perks and experiences — we provide it all.

THE PERKS

Some of the industry-leading benefits you will receive working at Aritzia:

• Product Discount — Maybe you’ve heard of our famous product discount? Or our exclusive private shopping events? You have now.
• Baby Leave Program — We provide up to 16 weeks of paid time to support you and your growing family.
• A-OK Commissary & Cafe — Everyday Luxury dining, exclusive to Aritzia. Our in-house bistro and cafe is a private oasis where employees can enjoy curated, subsidized Everyday Luxury dining.
• The SET — Our in-office fitness studio and gym with state-of-the-art equipment, custom-created classes and optional personal training. Open 7 days a week, it works out well.
• Aritzia Virtual Wellness — Because your health, happiness and safety matter, we provide 24/7 resources to support you in your wellbeing goals, whether they’re physical, mental, social or financial.
• Aspirational Workplace — Our offices are specially designed to be spaces of creativity, productivity and inspiration. They’re also dog friendly. Woof.

ARITZIA

Aritzia is an Equal Employment Opportunity employer. Our goal is to be inclusive, diverse, and representative of the communities where we work while creating an environment where every person can enjoy a successful career. This commitment applies to all candidates and employees regardless of race, ethnicity, citizenship, creed, place of origin, religion, sex, gender identity, gender expression, sexual orientation, family status, marital status, disability, age, and any other protected characteristic.

Requests for accommodation due to a disability or any other protected characteristic can be made at any stage of the recruitment process and during employment by contacting our People & Culture Team.

We’re committed to making your experience positive and transparent. Please note, our recruiters will only contact you using an @aritzia.com email address. If you receive recruitment-related messages from other domains, please disregard them.