Intermediate and Senior Security Assessment & Authorization (SA&A) Specialist

Role overview Support security accreditation for a cloud-native platform by preparing assessment materials, gathering evidence, conducting tests, and reporting findings against Government of Canada security requirements. This intermediate-level specialist will work with project teams, architects, and security stakeholders to help establish and maintain compliance across the platform lifecycle.

Responsibilities - Advise project teams on security for cloud solutions and help complete assessment and authorization activities. - Develop and maintain control response documentation, security installation plans, and evidence packages. - Collect, organize, and record evidence that demonstrates implementation of security controls. - Perform security tests and document results in formal reports. - Participate in reviews, assessments, and audits, identifying risks and recommending remediation. - Coordinate with technical and security stakeholders to align implementation with applicable requirements.

Requirements - Strong hands-on knowledge of Microsoft Azure and its security capabilities. - Experience implementing and configuring security controls across cloud services. - Background supporting cloud security governance and compliance initiatives. - Experience producing security assessment artifacts, documentation, and evidence packages. - Experience carrying out security testing and documenting results. - In-depth knowledge of Government of Canada Security Assessment and Authorization processes; an active Government of Canada Secret clearance is required when applying.

Nice to have Experience on Canadian federal cloud modernization work, familiarity with government IT security risk methods, or knowledge of cloud security services for policy, identity, threat protection, key management, and monitoring. Relevant security certifications are also valued.

Benefits and work setup Remote position in Canada, with an expected project term from October 2026 through July 2027. The work is described as collaborative, with opportunities to share expertise and learn from experienced colleagues.