Intermediate Cloud & Infrastructure Specialist at Definity, Waterloo

AI Summary

This is an Intermediate Specialist, Cloud & Infrastructure Engineering role at Definity in Waterloo, ONT. The position focuses on leading enterprise-wide vulnerability remediation and platform risk management. Key duties involve coordinating patching across infrastructure and working with security teams. Top requirements include 5+ years of relevant experience in supporting server infrastructure and strong experience with Windows patching technologies.

The Opportunity at Definity

Definity, a leading Canadian insurance provider, is actively seeking a highly driven technology professional for an Intermediate Specialist, Cloud & Infrastructure Engineering position. This pivotal role involves leading enterprise-wide efforts in vulnerability remediation and comprehensive platform risk management. The successful candidate will take ownership of the identification, prioritisation, and coordination of essential remediation activities across various infrastructure and end-user platforms. This requires close collaboration with engineering, security, and application teams to ensure the timely resolution of identified risks. The specialist will be instrumental in bringing structure and consistency to vulnerability management, significantly improving visibility and accountability across teams. This ultimately strengthens the organisation’s overall risk posture and enhances audit readiness through the implementation of standardised processes and reporting. This opportunity is ideal for individuals with substantial experience looking to contribute to a high-performance team dedicated to rethinking insurance.

Key Responsibilities and Expectations

As an Intermediate Specialist, a primary expectation will be to coordinate patching and remediation activities effectively across infrastructure, security, and application teams. This ensures that all identified vulnerabilities are addressed within defined timelines and established risk tolerances. The role demands a proactive response to changing threat environments, leveraging insights derived from advanced AI vulnerability discovery and security analysis tools. It is crucial to ensure that all patch management processes align rigorously with enterprise standards, internal security policies, and relevant regulatory expectations. Participation in key governance forums, such as Change Advisory Boards and risk reviews, is also required to ensure the timely completion of remediation actions based on their priority and associated risk. Furthermore, the specialist will proactively assess and manage security risk exposure, identify any gaps in patch coverage, and execute comprehensive mitigation plans. Building strong collaborative relationships across various Technology and business teams is essential to drive accountability and facilitate the swift resolution of security and patching issues, thereby bolstering the overall infrastructure security.

Required Skills and Professional Experience

Candidates applying for this Intermediate Specialist position should possess a robust set of skills and professional experience in diverse technologies. This includes significant experience with Cloud environments, Windows Server, Active Directory, Exchange, and Certificate management. Demonstrated experience with virtualised technologies, specifically VMWare vCenter and ESXi, is also a key requirement. The ability to coordinate small operational projects efficiently will be a valuable asset. Strong experience in Windows patching technologies is paramount, alongside practical experience with virtualised desktop environments such as Microsoft WVD. Knowledge of ITSM tools, notably ServiceNow, and experience with vulnerability management tools like Qualys Eliminate, are highly desirable. A minimum of five years of relevant experience in supporting server infrastructure is essential for success in this role. While not strictly mandatory, certifications such as Microsoft MTA/MCSA/MCSE, VMware VCP/VCAP, or ITIL Foundation would further enhance a candidate's profile, showcasing a deep commitment to best practices in infrastructure and security. This comprehensive experience is vital for managing risk effectively across the organisation's complex technological landscape.