Cloud & Container Security Architect

BeachHead; Toronto; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading financial institution in Toronto seeks a Cloud & Container Security Architect to define and develop cloud security standards and oversee CI/CD processes. The ideal candidate will have hands-on experience with Azure and GCP, strong engineering background, and excellent communication skills. The role offers the opportunity to work in a dynamic team environment focusing on secure cloud architectures.

Qualifications

• Strong technical expertise in cloud architecture.
• Experience developing security standards for cloud services.
• Ability to embed security practices into development workflows.

Responsibilities

• Analyze cloud architecture for security risks.
• Define security standards for cloud services.
• Provide governance for CI/CD secure code deployment.
• Collaborate with cross-functional teams to embed security practices.

Skills

Hands-on experience with Microsoft Azure

Hands-on experience with Google Cloud Platform

Strong engineering or architecture background

Expertise in infrastructure integration

Exceptional communication skills

Analytical and problem-solving abilities

Collaborative team player

Tools

Azure Kubernetes Service (AKS)

Google Kubernetes Engine (GKE)

Job description

Working within one of our leading financial institutions, this role calls for a Cloud & Container Security Architect who will play a pivotal part in defining cloud security standards, reviewing engineering designs, and integrating security best practices into CI/CD pipelines. The successful candidate will combine strong technical expertise, architectural thinking, and communication skills to build resilient and compliant cloud infrastructures that enable innovation while mitigating risk.

Responsibilities

• Analyze and review cloud architecture diagrams to identify security risks and ensure secure design practices for public cloud and container platforms.
• Define and develop security standards, controls, and guidelines for secure deployment and operation of public cloud services and containerized applications.
• Provide governance and oversight for CI/CD pipeline development to ensure secure code and image deployment.
• Establish and maintain security controls for Azure and GCP services, including Cloud SQL, BigQuery, AKS, and GKE.
• Review engineering designs to ensure alignment with internal security standards and industry best practices.
• Oversee end-to-end governance for public cloud infrastructure deployment, integration, and security controls with a focus on containerized platforms.
• Collaborate with DevOps, engineering, and cross-functional teams to embed security practices and tools into development workflows.
• Develop security reporting metrics (KRIs, KPIs) to demonstrate the effectiveness of implemented security controls.
• Partner with First and Second Line of Defense teams to ensure compliance with established security frameworks and policies.

Desired Skill Set

• Hands‑on experience with Microsoft Azure and/or Google Cloud Platform (GCP).
• Strong engineering or architecture background, including solution design and build.
• Expertise in infrastructure integration, connecting multi‑cloud and on‑prem environments.
• Exceptional communication and documentation skills, with the ability to convey complex concepts to technical and non‑technical audiences.
• Highly collaborative team player with a proactive and detail‑oriented approach.
• Strong analytical and problem‑solving abilities, with a focus on delivering secure, scalable solutions.

Nice‑to‑Have

• Prior experience working in banking or financial institutions.
• Hands‑on knowledge of container platforms such as Azure Kubernetes Service (AKS) and Google Kubernetes Engine (GKE).
• Deep understanding of cloud security frameworks, compliance standards, and best practices.

Equal Opportunity Statement

BeachHead is an equal opportunity agency and employer. We advocate for you and welcome anyone regardless of race, color, religion, national origin, sex, physical or mental disability, or age.