DevSecOps Engineer

Toronto, ON
On-site
Posted Oct 26, 2026
1 position

$90,000–$110,000 / year

Opens LinkedIn

Employment type: Full-time
Experience level: Senior · 5+ years
Posting language: English
Working hours: 40 hours per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Serve as a technical subject matter expert for application teams adopting automated certificate patterns, advising on certificate design choices such as gateway-terminated TLS and application-level TLS. Standardize certificate patterns to reduce fragmentation and operational complexity.

Job details

Inclusion without Exception Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes. TCS has been serving the Canadian marketplace for more than 35 years and today is the technology partner of choice for many of the country's leading organizations. As one of the largest IT services providers in Canada and globally, TCS is aiming to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence. Rooted in the heritage and values of the Tata Group, TCS is focused on creating long-term value for its clients, investors, employees, and the communities it serves. With a highly skilled workforce supporting customers from coast to coast, TCS has consistently been recognized as a Top Employer by the Top Employers Institute, including a recent top ranking at the country level. TCS also sponsors 14 of the world's most prestigious marathons and endurance events, including the TCS Toronto Waterfront Marathon, reflecting its commitment to health, sustainability, and community empowerment. DevSecOps Engineer Job Description Required Skills Strong hands-on experience with Venafi, including TLS Protect, Venafi Platform, or equivalent. Solid understanding of PKI fundamentals, TLS/mTLS, certificate chains, and keystores including JKS and PKCS12. Experience integrating certificates with Azure Key Vault. Experience with load balancing. Experience with Kubernetes (AKS), including namespaces, secrets, ingress, and deployment automation. CI/CD automation experience using Azure DevOps, GitHub Actions, Jenkins, or similar tools. Experience working with Linux and Windows operating systems. Java experience preferred. Experience working in an Agile environment preferred. Positive attitude with strong cross-team collaboration skills. Key Responsibilities Act as a technical SME for application teams adopting automated certificate patterns. Provide guidance on certificate design choices, including gateway-terminated TLS and application-level TLS. Help standardize certificate patterns to reduce fragmentation and operational complexity. Salary Range - CA$ 90,000 - CA$ 110,000 Per Year Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodation during the recruitment and selection process, please inform Human Resources. Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2-week period. We invite you to continue to apply for other opportunities that match your profile.

What you’ll do

Requirements

Requires hands-on experience with Venafi or an equivalent platform, strong knowledge of PKI, TLS/mTLS, certificate chains, keystores, Azure Key Vault, load balancing, and Kubernetes on AKS. Candidates should also have CI/CD automation experience and familiarity with Linux and Windows; Java and Agile experience are preferred.