Senior DevSecOps (DSO) Analyst - Incident & Release Management

Company Description

At Sleep Country Canada/Dormez-vous? (SCC/DV), we are inspired every day through our purpose to transform lives by awakening Canadians to the power of sleep and our vision to champion sleep as the key to healthier and happier lives, helping everyone achieve better tomorrows through better tonight’s.

Guided by our values – We CARE About People; We WIN Together; We DREAM Big and We DELIVER with Excellence – we are building on our 30-year foundation of taking care of each other and our customers’ sleep needs, with passion and commitment to be the best that we can be. We invest in our sleep ecosystem, innovative products, world-class customer experience, our communities and diverse best-in-class team to be Canada’s leading sleep partner.

Job Description

As a Senior DevSecOps Analyst - Incident and Release Management, you will be an integral part of the DSO Team, responsible for improving our DSO technologies and ensuring seamless software releases and efficient incident management. Working closely with the Development, Operations, IT, Business, and Security teams, you will incorporate the best practices of release and change management into the software development and operational cycles. You will be primarily focusing on our key technologies, including Oracle Cloud Retail Suite, Google Cloud Platform, Apigee, Java SpringBoot, and Big Commerce. In this role, you will lead the efforts to develop the CI/CD/CT pipelines, manage the release processes, and promptly respond to incidents to maintain the highest levels of system integrity and availability. Additionally, you will work on enhancing our monitoring and alerting platform, which consists of Dynatrace and PagerDuty.

Responsibilities of this role will include but are not limited to:

• Release Management: Oversee the release process for applications spanning platforms and technology, included by not limited to: Google Cloud Platform (GCP), BigCommerce eCommerce Platform, Oracle Cloud Retail suite ensuring secure and efficient change control and release management practices.
• Incident Management: Lead the response to incidents, ensuring quick resolution, follow through to resolution, mitigation of risks, and implementation of lessons learned to prevent future occurrences.
• DSO  Integration: Integrate DevSecOps tools and practices at every phase of the software development lifecycle, from initial design through integration, testing, deployment, and software delivery.
• Automation: Develop and implement automation strategies for DevSecOps processes to enhance efficiency and effectiveness, utilizing scripting languages and automation tools.
• Compliance and Best Practices: Ensure compliance with relevant security standards and frameworks. Promote security best practices and a culture of security awareness within the organization.
• Collaboration and Training: Work closely with IT and business teams to foster a collaborative environment. Provide training and mentorship on DevSecOps best practices and incident response protocols.
• Continuous Improvement: Continually evaluate DevSecOps tools, technologies, and processes for improvement opportunities. Stay abreast of the latest DevSecOps trends, threats, and technologies

Qualifications

The Qualifications and Experience we like to see:

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum of 7 years' experience in a DevSecOps or related role, with a focus on release and incident management.
• Understanding of the integration and configuration of SCA, SAST, DAST tools and secrets management systems in CI and CD pipelines.
• Hands-on experience with enterprise monitoring/alerting tools, such as Dynatrace and Pagerduty.
• 5 years of development experience in Object-Oriented programming languages, preferably Java SpringBoot or similar, and associated build and test tools.
• Proficiency in automation tools and scripting languages (e.g., Python, Bash).
• Strong experience with Oracle Retail Suite, Google Cloud Platform.
• Working knowledge of Agile, SAFe, and DevSecOps.
• Working knowledge of GitHub/GitHub Actions, GCP CloudRun/CloudBuild/GKE deployment, Terraform and other Jira and Agile project management and Kanban boards.
• Hands-on experience with infrastructure as code tools. Terraform is preferred.
• Understanding of security principles, frameworks (e.g., NIST, ISO, ITIL), and compliance requirements.
• Excellent problem-solving and leadership skills.
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate strategic information, security topics, policies, and standards as well as risk-related concepts to technical. and nontechnical audiences at various hierarchical levels.

Additional Information

Why members of our Corporate team love working at Sleep Country Canada/Dormez-vous?:

• This is not a job but a CAREER with opportunities for growth and advancement
• Diverse and inclusive work environment
• We will invest in you and provide extensive training, mentoring and continuous development
• Access to training and development platforms
• Full medical, dental benefits and a Deferred Profit Sharing Program
• Annual Wellness Credit of up to $250.00 for any products/services that improve your health and well-being, i.e., health assessments, nutrition counselling, hiking shoes, a yoga outfit or fitness equipment!
• Associate Discount Program where you will be able to enjoy some of the world’s best sleep products
• Maternity/Parental leave top up benefits
• Tuition Reimbursement Program that covers professional AND personal development
• Long service awards, celebrations and other social events
• Associate Referral Program
• Paid day off to volunteer at your local charity of choice
• Recognized as one of Canada’s Most Admired Corporate Cultures in 2023 by Waterstone Human Capital

Commitment to Equity, Diversity, Inclusion & Belonging (EDI&B)

At SCC/DV, we are committed to building a company culture of inclusion and diversity where differences are embraced and valued, this allows us to better understand and meet the needs of our customers and the communities we serve. We want to ensure every job applicant is treated fairly and with respect regarding race, national or ethnic origin, religion, age, gender, sexual orientation, or disability.

About Sleep Country Canada/Dormez-vous?

Sleep Country is Canada’s leading specialty sleep retailer with a purpose to transform lives by awakening Canadians to the power of sleep. Sleep Country Canada operates under the retailer banners; Sleep Country, Dormez-vous, the rest, Endy, Hush, Silk & Snow and most recently acquired, Casper Canada. The Company has omnichannel and ecommerce operations including over 300 corporate-owned stores and 18 distribution centers warehouses across Canada. Recognized as one of Canada’s Most Admired Corporate Cultures in 2023 by Waterstone Human Capital, Sleep Country is committed to building a company culture of inclusion and diversity where differences are embraced and valued. The Company actively invests in its sleep ecosystem, innovative products, world-class customer experience, communities and its people. For more information about Sleep Country, please visit www.sleepcountry.ca.