Security Assessment & Authorization (SA&A) Specialist

Canada
Remote
Posted Sep 23, 2026
1 position

$95–$140 / hour

Opens an external site

Employment type: Contract
Experience level: Lead · 10+ years
Posting language: English
Working hours: 40 hours per week
Location requirements: Country, Canada

Job summary

The SA&A Lead will manage security authorization activities for cloud-based applications within Microsoft Azure environments. This includes conducting compliance assessments, developing security testing strategies, and collaborating with stakeholders to ensure all security and privacy requirements are met.

Job details

WHO WE ARE PLATO is Canada’s largest Indigenous-owned software testing and technology services company. For nearly 30 years, our expert teams have helped our clients deliver reliable products that users enjoy interacting with. Our 100% Canada‑based team brings deep experience in QA, software testing, and IT services, along with a shared commitment to collaboration, mentorship, and continuous improvement. We’re a team that shows up for each other, whether that’s tackling complex client challenges or helping colleagues grow through coaching and knowledge‑sharing. As Canada’s largest Indigenous‑owned software testing company, we’re proud of our roots and our mission to build a stronger, more inclusive technology workforce. At the same time, we warmly welcome applicants of all backgrounds and experiences who are passionate about quality, teamwork, and making an impact. SECURITY ASSESSMENT AND AUTHORIZATION (SA&A) SPECIALIST Location: Remote, Canada DURATION-(OCT 2026 TO JULY 2027) SECURITY CLEARANCE: ACTIVE GOVERNMENT OF CANADA SECRET CLEARANCE IS REQUIRED AT THE TIME OF APPLICATION SUMMARY We are seeking an intermediate-level Security Assessment & Authorization (SA&A) Specialist to provide subject matter expertise and support the completion of security accreditation activities for an Azure-native platform. The successful candidate will lead and contribute to the documentation, evidence collection, security testing, and reporting activities required to achieve and maintain compliance with Government of Canada (GoC) SA&A requirements. This role requires strong knowledge of Microsoft Azure security services, cloud security controls, and Government of Canada security assessment and authorization processes. RESPONSIBILITIES * Provide security subject matter expertise for Azure-based solutions and cloud environments. * Support the completion of required Security Assessment and Authorization (SA&A) documentation and activities. * Develop and maintain Document Control Responses. * Collect, organize, and document security control evidence. * Prepare and maintain Security Installation Plans (SIPs). * Execute security testing activities and document findings in formal test reports. * Collaborate with project teams, architects, and security stakeholders to ensure compliance with security requirements. * Support security reviews, assessments, and audits throughout the project lifecycle. * Identify and document security risks and remediation recommendations. MANDATORY QUALIFICATIONS * Strong knowledge and hands-on experience with the Microsoft Azure platform. * Experience implementing and configuring security controls across Azure components and services. * Demonstrated experience supporting cloud security compliance and governance initiatives. * Experience developing SA&A artifacts, security documentation, and evidence packages. * Experience executing and documenting security testing activities. * In-depth knowledge of Government of Canada Security Assessment and Authorization (SA&A) processes and requirements. PREFERRED QUALIFICATIONS * Experience working on Government of Canada cloud transformation or modernization initiatives. * Familiarity with GC IT Security Risk Management methodologies and standards. * Experience with Azure security services such as Microsoft Defender for Cloud, Azure Policy, Microsoft Entra ID (Azure AD), Key Vault, and Sentinel. * Relevant security certifications such as AZ-500, CISSP, CCSP, or equivalent. WORK WITH US At PLATO, we believe that great work happens when people feel supported, connected, and challenged in the right ways. You’ll be part of a collaborative environment where experienced professionals share knowledge, mentor others, and contribute to solving complex, real‑world client projects. We are committed to inclusive hiring practices and encourage applications from individuals of all backgrounds, including women, persons with disabilities, visible minorities, and Indigenous peoples. If you require accommodation at any stage of the recruitment process, we’re here to support you. PLATO respectfully acknowledges that we operate on treaty territories, unceded First Nations and Inuit territories, and within Métis homelands. We honour the long history of these lands and actively work toward reconciliation between Indigenous and non‑Indigenous peoples on Turtle Island.

What you’ll do

Requirements

Candidates must have over 10 years of experience in security functional testing and control mapping, specifically within the Canadian Government SA&A process. Proficiency in Azure security services and Microsoft platforms like Dynamics 365 and Purview is essential, along with an active Government of Canada Secret Clearance.