Cloud Security Engineer

📋 Description

• Design cloud security controls across AWS & Google Cloud, multi-account setup, network segmentation.
• Build reusable Terraform modules, reference architectures, policy-as-code guardrails.
• Operate and tune CSPM/CNAPP tooling to identify misconfigurations and gaps.
• Drive remediation of cloud vulnerabilities balancing risk, effort, and impact.
• Strengthen IAM, secrets management, key rotation, and just-in-time access.
• Embed security into CI/CD through IaC scanning, container image scanning, SBOM generation, and supply chain controls.

🎯 Requirements

• 4+ years security engineering; 2+ years cloud security in AWS and/or Google Cloud.
• Strong knowledge of cloud-native attack paths, IAM risks, data protection, and workload identity.
• Hands-on IaC experience (Terraform preferred) and secure it at scale.
• Ability to write Python/Go to automate detection, remediation, and security workflows.
• Experience integrating security tooling into CI/CD and developer workflows.
• Knowledge of SOC 2, HIPAA, HITRUST, PCI-DSS, or ISO 27001, translating requirements into controls.

🎁 Benefits

• Remote-first flexibility to work where you work best, with Ottawa, Toronto, Calgary, or Vancouver preferred.
• Flexible PTO and competitive pay, because work-life balance matters.
• RRSP/401k match and stock options to invest in your future.
• Premium benefits package with customizable coverage, paramedical services, and an HSA.
• Fullscript discounts to save on high-quality wellness products.
• Continuous learning opportunities to grow your skills and career.