Cloud Security Architect at ELITS designing secure cloud environments and managing cloud security policies for business objectives and compliance requirements.
Responsibilities
Cloud Security Architecture - Design and implement secure cloud infrastructures using Microsoft Azure and Microsoft 365 services, ensuring they meet security, compliance, and business requirements.
Identity and Access Management - Architect and manage secure Azure Active Directory (AAD) solutions, including multi-factor authentication (MFA), conditional access, and identity protection policies to secure user identities and access.
Cloud Security Best Practices - Leverage Azure Security Center, Microsoft Defender, and other tools to establish best practices for securing cloud environments, including vulnerability management, threat detection, and incident response.
Compliance & Governance: Ensure that all cloud architectures comply with industry regulations and internal security policies, including frameworks like GDPR, ISO 27001, SOC 2, HIPAA, and more. Auditing for compliance.
Risk Management: Identify potential security risks in cloud services and design mitigation strategies. Collaborate with risk management teams to assess threats, vulnerabilities, and implement corrective actions.
Cloud Security Tools, Automation, Scripting, and Reporting: Implement cloud security tools such as Azure Sentinel, Microsoft Defender for Identity, and Cloud App Security to monitor and automate threat detection and response. Develop automation solutions using tools such as PowerShell and Azure CLI, or Power BI to streamline cloud resource deployment and management.
Encryption & Secure Data Practices: Ensure the encryption of data at rest and in transit across all cloud environments. Establish secure data storage practices and advocate for zero-trust models within cloud services.
Collaboration & Consultation - Work closely with internal stakeholders, external clients, and vendors to ensure cloud environments are designed with a focus on security and meet business objectives.
Security Incident Response: Provide leadership in identifying, responding to, and remediating security incidents or vulnerabilities within cloud services.
Vulnerability Management: Participation in day-to-day vulnerability management activities and keep improving vulnerability management process.
Security Awareness & Training: Educate teams on cloud security best practices, DLP policies, and compliance requirements, fostering a culture of security awareness across the organization.
Business Continuity Management: Define and agree, together with stakeholders, the BCM process and plans, disaster recovery plans and metrics and goals.
Requirements
Bachelor's Degree or higher in Computer Science or equivalent
5+ years of prior work experience experience in cloud architecture or solution design with a focus on Microsoft Azure and Microsoft 365 security
Proven expertise in cloud security best practices, with strong knowledge of Azure Security Center, Microsoft Defender, and other security tools.
Hands-on experience with Azure Active Directory (AAD)/Entra ID, Conditional Access, Identity Protection, and security policies.
In-depth knowledge of Data Loss Prevention (DLP) strategies and tools within Microsoft 365 and Azure.
Understanding of compliance frameworks and regulatory requirements (e.g., GDPR, SOC 2, ISO 27001, HIPAA).
Strong background in encryption, identity and access management (IAM), and security monitoring tools such as Azure Sentinel, Cloud App Security, Microsoft Defender for Identity, and CrowdStrike Falcon and CS dashboard.
Experience implementing security features such as Zero Trust architecture, threat detection, and vulnerability management.
Familiarity with PowerShell scripting, Azure CLI, and other automation tools for managing cloud resources securely.
Knowledge of Azure Firewall, Azure Front Door, Web Application Firewall (WAF), and other Azure security solutions.
Experience in developing or maintaining security operations centers (SOC) or managing security incident response processes.
Strong analytical and problem-solving skills, with the ability to identify and address security vulnerabilities.
IT & Security Specialist managing IT operations, security, and infrastructure for Senstar, a leader in security technology. Hands - on role blending end - user support, cybersecurity, and infrastructure management.
HR Systems Security Specialist responsible for design, configuration, and administration of security within Workday and SAP. Collaborating with HR and stakeholders to ensure effective access design and compliance.
Cybersecurity advisor working within the DCYB to develop IT security measures. Collaborating with teams to fortify cybersecurity posture and ensuring data protection for citizens.
Consultant in remuneration and occupational health and safety at the Quebec Federation of Municipalities. Ensuring employee needs match organizational requirements and promoting a safe work environment.
Cybersecurity Administrator providing operational support for compliance activities in information security. Assisting vendor risk management, audit coordination, and vulnerability tracking.
Sr. Manager leading cloud security, compliance, and governance at Metergy Solutions Inc. Drive regulatory adherence and risk mitigation across diverse cloud environments with a focus on security by design.
Security Advisor responsible for designing telecommunications network architectures at Alithya. Ensuring all components meet functional and non - functional requirements while adapting to new trends in the field.
Technical Lead in Cybersecurity Engineering at Morgan Stanley driving security initiatives. Collaborate with tech leaders to ensure enterprise - wide cybersecurity effectiveness and compliance in Montreal.
Cyber Security Intern supporting the operation of Capital Power’s cyber security infrastructure. Engaging in daily operational tasks, security reviews, and incident investigations.
Financial Security Advisor selling life and health insurance products and developing client relationships. Analyzing needs and recommending personalized financial solutions in a hybrid work setup.