Role overview

We have a requirement for a ServiceNow Developer /Integration Specialist (Cyber Managed Services).
Please see details below:

Job Description:
We are seeking an experienced ServiceNow Developer / Integration Specialist to support the implementation and integration of ServiceNow within a large-scale Cyber Managed Services environment.
The successful candidate will be responsible for designing, developing, configuring, and supporting integrations between:
Microsoft Sentinel
EY ServiceNow instance
Client ITSM platform (BMC Helix / Remedy)
The objective is to establish a scalable operational workflow that enables Security Operations Centre (SOC) analysts to manage cyber incidents efficiently across multiple client environments while maintaining appropriate synchronization between security tooling and client service management platforms.

Primary Responsibilities
Design and develop integrations between Microsoft Sentinel and ServiceNow.
Configure ServiceNow Incident Management workflows for Security Operations.
Develop and maintain REST API integrations between ServiceNow and external platforms.
Design and implement bi-directional synchronization between:
o ServiceNow
o BMC Helix / Remedy ITSM
Configure field mappings, incident lifecycle synchronization, assignment groups, priorities, statuses, work notes, comments, and attachments.
Support automated incident enrichment and orchestration workflows.
Assist with ServiceNow data model configuration where required.
Develop custom scripts, Script Includes, Business Rules, Flow Designer workflows, IntegrationHub integrations, and REST/SOAP services.
Troubleshoot integration issues and performance bottlenecks.
Participate in solution design sessions with Cyber Managed Services, SOC Operations, Service Delivery, and client technical teams.
Produce technical documentation including:
o Solution Design
o Integration Design
o Data Mapping
o Runbooks
o Operational Support Guides
Duration of the contract (planned start date and planned end date): July 2026 December 2026 with possibility of extension Required Skills|Qualifications:
Required Experience
Candidates should demonstrate experience in most of the following areas:
ServiceNow
5+ years ServiceNow Development
ServiceNow Incident Management
IntegrationHub
Flow Designer
Script Includes
Business Rules
REST APIs
MID Server
OAuth authentication
Import Sets
Transform Maps

Security Integrations
Experience integrating ServiceNow with one or more of:
Microsoft Sentinel
Microsoft Defender XDR
Microsoft Defender for Endpoint
Microsoft Defender for Identity
Microsoft Defender for Office 365
Experience with Microsoft's official ServiceNow connector is highly desirable.

ITSM Integration
Strong experience integrating ServiceNow with enterprise ITSM platforms including:
BMC Helix
BMC Remedy
Other enterprise ITSM solutions (considered an asset)

Experience implementing:
Bi-directional incident synchronization
Status synchronization
Assignment routing
Comment synchronization
Work note synchronization
Closure synchronization
Attachment synchronization
API-based integrations

Desired Technical Skills
JavaScript
JSON
REST APIs
SOAP (asset)
OAuth
Azure Active Directory / Microsoft Entra ID authentication
Microsoft Graph API (asset)
Azure Logic Apps (asset)
Azure Functions (asset)

Cyber Security Experience
Experience working within Security Operations or Managed Security Services is strongly preferred.
Exposure to one or more of the following would be beneficial:
SOC Operations
SIEM
MDR
Incident Response
Security Incident Management
Threat Detection
MITRE ATT&CK
Microsoft Sentinel

Deliverables
The contractor will support the delivery of:
Microsoft Sentinel to ServiceNow integration
ServiceNow to Client Helix/Remedy bi-directional integration
API development and configuration
Workflow automation
Incident synchronization
Technical documentation
Required Certifications (Preferred)
One or more of:
ServiceNow Certified System Administrator (CSA)
ServiceNow Certified Application Developer (CAD)
ServiceNow Certified Implementation Specialist
Microsoft Certified: Cybersecurity Analyst (SC-200)
Microsoft Azure certifications (AZ-104, AZ-305, etc.)

Mandatory Requirements
Government of Canada Reliability Status (active or eligible with existing clearance preferred)
Excellent written and verbal communication skills
Experience working directly with enterprise clients
Ability to work independently within a consulting and project delivery environment

Nice-to-Have Experience
Cyber Managed Services
Multi-tenant SOC environments
Security Operations Centre implementations
Microsoft Security ecosystem
Enterprise-scale ServiceNow deployments
ITIL Foundation certification
Agile delivery methodologies
Client Location: Toronto
Work Model: Full time remote with occasional travel to site. Flexible with location in Canada. May need to travel to client site in New Brunswick once or twice over a 4 month period.( A candidate from New Brunswick with reliability status and experience, would be a plus). If local will be onsite once a month.
Rank: Manager
Security Clearance: Government of Canada Reliability Status (Mandatory)