CareerPlan

Cloud Security Engineer

TORONTO HQ 150955Full-time2026-10-21 → 2026-11-10
Hybrid

Core

Design and implement AWS security architectures, controls, and compliance frameworks to secure cloud infrastructure, applications, and workloads.

Role type

Senior Cloud Security Engineer (AWS)

Builds

Secure AWS environments, CI/CD pipelines, and containerized workloads

Domain

Cloud Security / Financial Services

Required skills

AWS security architecture, IAM, VPC, encryption/key management, Terraform, Python, Bash, Kubernetes security, vulnerability assessment, incident response, compliance frameworks (CIS, NIST, ISO, SOC2, PCI-DSS, HIPAA)

Preferred skills

Multi-cloud experience (Azure, GCP), AWS Security Specialty certification, CISSP, Solutions Architect, DevOps Engineer

Technologies

AWS (Security Hub, GuardDuty, Macie, Inspector, WAF, Shield, KMS, CloudHSM, ACM, Secrets Manager, CloudTrail, CloudWatch, Config, EKS, ECS, Fargate), Terraform, CloudFormation, SIEM, SOAR

Responsibilities

Design and implement AWS security architectures aligned with compliance; Assess cloud security risks and enforce policies; Manage AWS IAM, Organizations, and Control Tower; Deploy and manage AWS-native security services; Configure and maintain encryption solutions; Integrate AWS logging and monitoring with SIEM; Secure networks via VPCs, Security Groups, and PrivateLink; Work with DevOps to embed security in CI/CD pipelines; Automate security with IaC and scripting; Apply container and Kubernetes security practices; Conduct vulnerability assessments and penetration testing; Drive compliance with industry frameworks; Develop and test incident response and disaster recovery plans; Train internal teams on cloud security.

Seniority

Senior, hands-on IC