Top Benefits
About the role
Location: Brampton- In office role
Department: IT / Engineering
Reports To: Head of IT
About Pillway Pillway is a modern digital pharmacy transforming the way patients manage their medications. We combine advanced technology, innovative delivery services, and patient-first care to simplify pharmacy experiences across Canada. As part of our mission to redefine pharmacy, we are expanding our technology team to ensure security, scalability, and reliability at every level.
Role Overview
We are seeking a skilled DevSecOps Engineer to join our growing team. This role will be responsible for embedding security into every phase of the software development lifecycle, ensuring compliance with healthcare regulations, and strengthening our cloud infrastructure. The ideal candidate has strong expertise in cloud security (preferably Azure), CI/CD pipelines, and DevOps automation, with a passion for enabling secure innovation in a fast-paced healthcare environment.
Key Responsibilities
- Security Integration: Implement security best practices and controls across CI/CD pipelines, infrastructure, and applications.
- Cloud Security: Manage and enhance security posture in Azure cloud environments, including identity, network, and application layers.
- Compliance: Ensure infrastructure and deployments meet healthcare regulatory requirements (PHIPA, PIPEDA, SOC 2).
- Infrastructure as Code (IaC): Build and maintain secure, automated infrastructure using tools such as Terraform, Ansible, or Bicep.
- Monitoring & Incident Response: Deploy and manage security monitoring, logging, and alerting systems (SIEM, IDS/IPS, vulnerability scanning).
- Collaboration: Work closely with development, QA, and operations teams to integrate security controls into pipelines and processes.
- Automation: Enhance DevOps practices with automated testing, policy enforcement, and configuration management.
- Continuous Improvement: Conduct regular threat modelling, risk assessments, and penetration testing.
Qualifications
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
- 4+ years of experience in DevOps or security engineering, with at least 2 years in a DevSecOps role.
- Hands-on experience with Azure cloud services, security policies, and monitoring tools.
- Proficiency with CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins, or similar).
- Strong knowledge of containerization and orchestration (Docker, Kubernetes).
- Experience with IaC tools such as Terraform, ARM, Bicep, or Ansible.
- Knowledge of security frameworks and standards (NIST, CIS Benchmarks, OWASP).
- Familiarity with compliance in healthcare environments is a strong asset.
- Excellent communication and collaboration skills.
Nice to Have
- Certifications such as AZ-500 (Azure Security Engineer), CISSP, CISM, or DevSecOps-specific certifications.
- Experience with secrets management (Vault, Azure Key Vault).
- Familiarity with generative AI security and modern automation tools.
What We Offer
- Competitive compensation package.
- Comprehensive health and dental benefits.
- Flexible hybrid/remote work options.
- Opportunity to make a real impact on healthcare innovation in Canada.
- A collaborative, fast-paced environment where new ideas are valued
About Pillway
Pillway is a tech-first, full-service virtual pharmacy that offers best-in-class service for individuals that require prescription medication, with a specialized focus for those who manage multiple medications per day. Reimagining the pharmacy experience, Pillway is revolutionizing today's traditional model through the thoughtful use of technology. It is the first of its kind in Canada that connects doctors, pharmacists and patients resulting in a full circle of care. Pillway has built a multifaceted technology platform that provides solutions for patients, pharmacists, and healthcare providers with complete end-to-end vertical integration across all pharmacy services. This connected ecosystem provides patients with an unmatched healthcare experience through the power of Artificial Intelligence.
Simpill Health Group is reimaging the healthcare experience through the thoughtful use of technology. Simpill is a Canadian health-tech company focused on creating industry disrupting technologies that optimize and simplify the healthcare experience and enable patients to live their best life. Current products of the company include Pillway, a full-service digital pharmacy and PillExchange, an enhanced e-Prescribing platform connecting doctors, pharmacists and patients.
Top Benefits
About the role
Location: Brampton- In office role
Department: IT / Engineering
Reports To: Head of IT
About Pillway Pillway is a modern digital pharmacy transforming the way patients manage their medications. We combine advanced technology, innovative delivery services, and patient-first care to simplify pharmacy experiences across Canada. As part of our mission to redefine pharmacy, we are expanding our technology team to ensure security, scalability, and reliability at every level.
Role Overview
We are seeking a skilled DevSecOps Engineer to join our growing team. This role will be responsible for embedding security into every phase of the software development lifecycle, ensuring compliance with healthcare regulations, and strengthening our cloud infrastructure. The ideal candidate has strong expertise in cloud security (preferably Azure), CI/CD pipelines, and DevOps automation, with a passion for enabling secure innovation in a fast-paced healthcare environment.
Key Responsibilities
- Security Integration: Implement security best practices and controls across CI/CD pipelines, infrastructure, and applications.
- Cloud Security: Manage and enhance security posture in Azure cloud environments, including identity, network, and application layers.
- Compliance: Ensure infrastructure and deployments meet healthcare regulatory requirements (PHIPA, PIPEDA, SOC 2).
- Infrastructure as Code (IaC): Build and maintain secure, automated infrastructure using tools such as Terraform, Ansible, or Bicep.
- Monitoring & Incident Response: Deploy and manage security monitoring, logging, and alerting systems (SIEM, IDS/IPS, vulnerability scanning).
- Collaboration: Work closely with development, QA, and operations teams to integrate security controls into pipelines and processes.
- Automation: Enhance DevOps practices with automated testing, policy enforcement, and configuration management.
- Continuous Improvement: Conduct regular threat modelling, risk assessments, and penetration testing.
Qualifications
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
- 4+ years of experience in DevOps or security engineering, with at least 2 years in a DevSecOps role.
- Hands-on experience with Azure cloud services, security policies, and monitoring tools.
- Proficiency with CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins, or similar).
- Strong knowledge of containerization and orchestration (Docker, Kubernetes).
- Experience with IaC tools such as Terraform, ARM, Bicep, or Ansible.
- Knowledge of security frameworks and standards (NIST, CIS Benchmarks, OWASP).
- Familiarity with compliance in healthcare environments is a strong asset.
- Excellent communication and collaboration skills.
Nice to Have
- Certifications such as AZ-500 (Azure Security Engineer), CISSP, CISM, or DevSecOps-specific certifications.
- Experience with secrets management (Vault, Azure Key Vault).
- Familiarity with generative AI security and modern automation tools.
What We Offer
- Competitive compensation package.
- Comprehensive health and dental benefits.
- Flexible hybrid/remote work options.
- Opportunity to make a real impact on healthcare innovation in Canada.
- A collaborative, fast-paced environment where new ideas are valued
About Pillway
Pillway is a tech-first, full-service virtual pharmacy that offers best-in-class service for individuals that require prescription medication, with a specialized focus for those who manage multiple medications per day. Reimagining the pharmacy experience, Pillway is revolutionizing today's traditional model through the thoughtful use of technology. It is the first of its kind in Canada that connects doctors, pharmacists and patients resulting in a full circle of care. Pillway has built a multifaceted technology platform that provides solutions for patients, pharmacists, and healthcare providers with complete end-to-end vertical integration across all pharmacy services. This connected ecosystem provides patients with an unmatched healthcare experience through the power of Artificial Intelligence.
Simpill Health Group is reimaging the healthcare experience through the thoughtful use of technology. Simpill is a Canadian health-tech company focused on creating industry disrupting technologies that optimize and simplify the healthcare experience and enable patients to live their best life. Current products of the company include Pillway, a full-service digital pharmacy and PillExchange, an enhanced e-Prescribing platform connecting doctors, pharmacists and patients.