Security Engineer

With $295.0 billion of gross assets under management, as of March 31, 2025, British Columbia Investment Management Corporation (BCI) is the provider of investment management services for British Columbia’s public sector and one of the largest asset managers in Canada. BCI seeks investment opportunities around the world and across a range of asset classes that convert savings into productive capital. Our investment returns play a significant role in helping our institutional clients build a financially secure future for their beneficiaries.Headquartered in Victoria, British Columbia, and with teams spanning Vancouver, New York, London, and Mumbai.BCI integrates environmental, social, and governance (ESG) factors into all investment decisions to meet clients' risk and return requirements.

Our people shape employee-focused initiatives, creating a strong culture. To learn more about our culture and values, visit our page.POSTING CLOSE DATE: May 21, 2026 BCI is looking for a senior security professional who thrives in complex, high-stakes environments. You will engineer and defend security solutions across cloud and hybrid infrastructure for one of Canada’s largest institutional investors, with real autonomy, real impact, and a team that takes the craft seriously.

There is a strong preference for this position to be based in Victoria, BC, though we will consider qualified candidates based in Vancouver, BC, with occasional travel between both locations expected.## WHO YOU GET TO WORK WITHThe Technology department is a strategic partner with BCI’s business areas. It enables investment processes and business activities that contribute to the achievement of BCI’s mission and long-term goals. The department creates the digital capabilities that support and enable BCI to innovate, modernize service and product offerings guided by best practices, and drive a digitally empowered workplace through new collaboration and productivity ecosystems.

The department is also responsible for providing the foundational infrastructure, systems, business applications, and advanced technologies for the front, middle, and back office.### ## THE OPPORTUNITYReporting to the Senior Manager, Cyber Security Engineering & Operations, the Security Engineer is responsible for security processes, technologies, and projects with various levels of complexity.

The Security

Engineer will be instrumental in developing security requirements and designing and implementing security solutions.The Security Engineer collaborates and communicates with business and technology teams in an Agile hybrid environment and enables the effective and efficient delivery of secure, quality products. At all levels, the Security Engineer may be assigned to one or more focus areas requiring additional specialized expertise and responsibilities.Note on Candidate Consideration:While the primary focus of this search is at the senior level, candidates who have fewer than 5 years of experience in a relevant role will also be reviewed. The successful candidate’s title and accountabilities will be determined based on the depth and breadth of their experience.### ### WHAT YOU BRING* Bachelor’s degree in technology, engineering, computer science, or a related field* A minimum of 5 years of experience in progressively senior technical roles with responsibility focused on information security processes, products, and projects* Very strong knowledge in engineering secure systems* Experience with securing cloud environments (MS Azure) Must have excellent documentation, customer-service, listening, communication and problem-solving skills Must be able to implement programs, security technologies and solutions to measure and sustain the security posture of large, complex environments* Experience with Agile methods (Scrum) and DevOps practices is an asset* Professional certifications such as Global Information Assurance Certification (GIAC), Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Certified Information Security Manager (CISM) or equivalent experience is essential## TECHNICAL SKILLS REQUIREMENTSMust have some combination of strong hands-on experience with at minimum 4 or 5 of the following skills or technologies:

Identity and access management systems for hybrid environments Secure coding practices* Systems engineering* Ethical vulnerability research and threat modeling* Windows, UNIX, and Linux operating systems security, virtualization technology security, container security and serverless computing security* Privileged access management systems for hybrid environments* EDR and/or other endpoint protection technologies* Firewall, intrusion protection and intrusion detection systems* Zero Trust system design* Cloud Native Application Protection Platform (CNAPP) systems* Secure appl