Information Security Engineer (Cloud Security Engineer)

Accountabilities

• Design and maintain secure multi-cloud identity and access frameworks, including Microsoft Entra ID Conditional Access policies and IAM boundaries across AWS and Azure.
• Configure and manage endpoint security baselines and automated device compliance workflows using Microsoft Intune.
• Implement and optimize data protection and compliance controls using Microsoft Purview, including Data Loss Prevention (DLP) policies.
• Strengthen cloud security posture across AWS and Azure environments by deploying native security controls and improving Secure Score metrics.
• Architect and maintain Microsoft Sentinel environments, including KQL query development and SOAR playbooks to automate threat detection and response.
• Manage vulnerability scanning tools, automate asset discovery, and coordinate remediation validation with infrastructure teams.
• Participate in on-call rotations to support incident response, investigation, and remediation of security issues.
• Collaborate with vendors to maximize security tool integrations and ensure effective utilization of security platforms.
• Review and validate access requests, identity exceptions, and security-related change approvals.
• Conduct technical risk assessments of third-party vendor solutions and cloud-based architectures.
• Manage security awareness programs, including phishing simulations and training campaigns using KnowBe4.

Requirements

• Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related technical field.
• 5+ years of hands-on experience in cloud security engineering, SecOps, or multi-cloud security environments.
• Strong expertise in AWS, Microsoft Azure, Microsoft Entra ID, Microsoft Intune, and Microsoft Purview security configurations.
• Proven experience with Microsoft Sentinel, including KQL query development and SOAR automation workflows.
• Strong scripting and automation skills using PowerShell and/or Python to improve security operations and reduce manual workload.
• Experience managing vulnerability management tools and driving end-to-end remediation processes.
• Familiarity with cloud security architecture, identity governance, endpoint protection, and compliance frameworks.
• Relevant certifications such as CISSP, AWS Certified Security – Specialty, or Microsoft SC-200 are considered strong assets.
• Strong analytical mindset with the ability to assess complex security risks and propose practical solutions.
• Excellent communication and collaboration skills, with the ability to work effectively in cross-functional technical teams.

Benefits

• Competitive salary of $85,000 – $90,000 CAD per year.
• Comprehensive benefits package including health, dental, vision, and employer-paid premiums (where applicable).
• Flexible work arrangements including remote, hybrid, or office-based options depending on role requirements.
• Access to continuous learning and professional development platforms.
• Leadership training and mentorship programs to support career growth.
• Employee discount platform offering savings on retail, entertainment, and services.
• Inclusive, collaborative, and people-first work culture focused on growth and innovation.
• Opportunities to contribute to high-impact security initiatives across a multi-cloud enterprise environment.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1