Cloud Security Engineer focused on high-automation and tool optimization across multi-cloud platforms, including AWS and Azure. Balancing technical security engineering and hands-on operations to strengthen digital security.
Responsibilities
Multi-Cloud Engineering and Perimeter Hardening**Identity and Access: Design and maintain Microsoft Entra ID Conditional Access policies and cloud IAM boundaries.**
Endpoints and Intune: Configure endpoint security baselines and automated deployment workflows via Microsoft Intune.**
Data Protection: Implement and tune Microsoft Purview Data Loss Prevention (DLP) policies and compliance toolsets.**
Cloud Posture: Deploy technical security controls natively within AWS and Azure to continuously drive up our Secure Score.**
Automation, Vulnerability Management and SecOps.**
Sentinel and SOAR: Architect Microsoft Sentinel, building KQL queries and automated response playbooks to eliminate manual triage overhead.**
Vulnerability Lifecycle: Administer scanning tools, automate continuous asset discovery, and technically validate remediation efforts with IT infrastructure teams.**
Operations: Participate in a weekly on-call operational rotation with two team members to investigate and remediate technical escalations.**
Vendor Engineering: Partner directly with vendors to ensure our security tools are integrated and utilized to their maximum potential.**
Security Approvals and Operational Support.**
Access and Exceptions: Review, triage, and technically validate security exceptions, identity exclusions, and access requests.**
Awareness Training: Manage the KnowBe4 platform to deploy automated phishing simulations and training tracks.
Requirements
Education: Graduate degree (Master's) in Computer Science, Cybersecurity, IT, or a related technical field.
Experience: Minimum of 5 years of hands-on experience in security engineering, multi-cloud security, or a technical SecOps environment.
Tech Stack Expertise: Practical experience configuring technical security boundaries within AWS, Microsoft Azure, Microsoft Entra ID, Intune, and Microsoft Purview.
Automation Skills: Proven track record managing Microsoft Sentinel, writing KQL queries, and creating automated workflows using PowerShell or Python.
Certifications (Preferred): CISSP (Certified Information Systems Security Professional), AWS Certified Security - Specialty, or Microsoft SC-200.
Benefits
Competitive salary and benefits package (Health, Dental, Vision and Personal Spending Account - employer paid premiums).
Flexible Work location (on-site offices in Toronto and Montreal, remote – work from home, hybrid as required per role).
Continuous learning and development via Percipio, our Learning Management System.
Be part of additional programs such as MentorMe, which helps our employee’s network, and grow within the organization.
Leadership Training offerings for new and emerging leaders.
Culture of great teams, coworkers and supportive leadership.
Perkopolis: Participation in a program that provides exclusive discounts on products and services to employees.
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Information Security Specialist strengthening technology controls, security governance, and risk management at TD, a major North American bank. Advising partners, assessing controls, supporting audits, and responding to incidents.
Buildings, development and security Analyst supporting fire prevention, facility safety, and building management at Desjardins. Analyzing risks, developing safety plans, and implementing physical security systems.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.