Senior Developer, SecOps

About Dialogue

Dialogue is the #1 virtual care provider in Canada. By developing our Integrated Health Platform🅫, we provide exceptional online health and wellness programs (primary care, mental health, iCBT, EAP, and wellness) to organizations that want to improve the wellness of their employees and families.

When it comes to our work, we set the bar high. Together, we’re transforming health and helping millions improve their well-being. We’re firm believers that great people don’t settle on:

• Impact
• Community
• Growth
• Excellence

Feel like you can make a difference? Good news, we saved you a seat! 

Come as you are. As a proud equal-opportunity employer, Dialogue is dedicated to creating a diverse and inclusive workplace for everyone. Qualified applicants will be considered regardless of citizenship, ethnicity, race, colour, religion, gender, gender identity or expression, sexual orientation, disability, age, or veteran status. Applicants who require specialized accommodation are encouraged to contact accessibility@dialogue.co.

AI Disclosure Statement

To ensure an efficient and fair review process, we utilize artificial intelligence tools to assist in the initial screening and assessment of applicants for this role.

⚠️ Recruitment Fraud Notice

Dialogue only contacts candidates through official @dialogue.co email addresses. We never request payment, gift cards, or personal financial information at any stage of hiring, and we never extend an offer without a structured interview process. All open roles are listed exclusively at dialogue.co/en/careers. If you receive a suspicious communication claiming to be from Dialogue, do not respond — report it to jobs@dialogue.co and verify the role on our official careers page.

Your role as Senior Developer, SecOps

We are seeking a Senior DevSecOps to join Dialogue’s Client Stream team. You will own the build pipelines, infrastructure, and security posture that enable Dialogue to deliver embedded app builds to a large partner—reliably, securely, and at the cadence the partnership demands.

This role sits at the intersection of CI/CD engineering, cloud infrastructure, and application security. You will be responsible for automating the SDK build and delivery pipeline, hardening the infrastructure that supports partner integration, and ensuring Dialogue’s security and compliance standards are maintained across the services your team owns.

What you'll be doing

As a Senior DevSecOps, you will be the team’s go-to person for everything related to build automation, infrastructure reliability, and security. You will work closely with mobile developers, backend engineers, and the partner’s technical team to keep the integration pipeline running smoothly.

Day-to-day you will:

• Automate and maintain the SDK build pipeline in CircleCI, packaging the Dialogue embedded app as AAR (Android) and XCFramework (iOS) artifacts and delivering them to the partner via SFTP, using Dialogue’s custom CircleCI orbs (base, k8s, aws).
• Manage and evolve the CircleCI configuration for the team’s repositories, including build, test, and deployment workflows, ephemeral deployments for pull requests, and custom Docker images used as CI job containers.
• Own the Terraform modules and configurations in the infra-code repository that define the team’s AWS infrastructure, including EKS cluster resources, Kubernetes deployments, and supporting services.
• Manage secrets securely across CI and runtime environments—migrating from SOPS-encrypted YAML to AWS Secrets Manager, configuring AWS KMS keys, and ensuring credentials are properly rotated and never exposed in repositories.
• Support Dialogue’s SOC 2 compliance by maintaining evidence for controls related to your team’s services—including vulnerability assessment findings, access controls, and change management processes.
• Configure and maintain Datadog monitoring, alerting, and Watchdog case management for the team’s services, ensuring incidents are routed to the correct team and response times meet operational expectations.
• Maintain and troubleshoot the Kubernetes and Istio service mesh configuration for the team’s services running on EKS, including networking, sidecar injection, and rollout automation.

We'd love to hear from you if you have

• Have strong experience with CI/CD platforms, particularly CircleCI (orbs, workflows, contexts, self-hosted runners) or similar tools, and have built pipelines that produce and distribute mobile SDK artifacts.
• Are proficient with Terraform for managing cloud infrastructure, including AWS EKS clusters, IAM roles, and supporting services.
• Have hands-on experience with Kubernetes and service mesh technologies (Istio), including debugging networking issues, managing deployments, and automating rollouts.
• Understand secrets management best practices—experience with SOPS, AWS Secrets Manager, AWS KMS, and securing credentials across CI pipelines and Kubernetes workloads.
• Have experience supporting security compliance programs (SOC 2 or similar), including vulnerability management, access control reviews, and audit evidence collection.
• Are comfortable with monitoring and observability tooling such as Datadog, including setting up monitors, managing alerting rules, and triaging incidents.
• Bring solid software engineering fundamentals—version control (Git), scripting (Bash, Python), Docker, and a strong understanding of Linux systems.
• Thrive in environments where your work directly enables partner-facing deliverables and operational commitments.

This role is critical to Dialogue’s ability to deliver a reliable, secure integration with a major partner.

Please note that as we serve customers across Canada, bilingualism is an asset for this position. You may be required to communicate in French and English.

At Dialogue, your well-being is our priority

Taking care of others also means taking care of our team! Depending on your role and employment status, you could have access to the following benefits:

• Access to the Dialogue app and virtual mental health support for you and your family
• Fully funded insurance, a health spending account, dental coverage, and fitness reimbursement
• 4 weeks vacation, 9 wellness days, and 1 volunteer day
• Hybrid work: 3 days/week in our Montreal or Toronto offices, excluding remote roles
• Work abroad up to 4 weeks/year
• Incentive plans, referral bonuses & RRSP matching
• Learning via Coursera, external training budget & mentorship
• Optional parental leave top-up