Cloud Engineer

Apptoza Inc.; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Apptoza Inc. is seeking a skilled Cloud Engineer to design, implement, and maintain cloud infrastructure across Azure, AWS, or GCP. You will implement cloud security controls, manage IAM, and support encryption, monitoring, and compliance.

The role requires scripting skills (PowerShell, Python, Bash) and strong knowledge of cloud networking. You will collaborate with security, networking, and application teams to ensure reliable cloud operations.

Qualifications

• Strong hands-on experience with Microsoft Azure, AWS, or Google Cloud Platform.
• Solid understanding of cloud security controls, IAM, RBAC, MFA, Zero Trust, encryption, and compliance requirements.
• Experience with cloud security solutions and cloud security tooling.
• Knowledge of scripting languages such as PowerShell, Python, or Bash.

Responsibilities

• Design, configure, implement, and maintain cloud infrastructure across Microsoft Azure, AWS, or Google Cloud Platform.
• Implement and manage cloud security controls, including IAM, RBAC, MFA, and Zero Trust principles.
• Support cloud encryption, security monitoring, and compliance requirements.
• Manage identity and access solutions using cloud providers’ IAM tools.
• Configure and maintain cloud networking components (VNets, VPCs, VPNs, DNS, load balancers).
• Develop automation scripts using PowerShell, Python, or Bash.

Skills

Cloud platforms

IAM & RBAC

Zero Trust security

Scripting (PowerShell/Python/Bash)

Networking (VNet/VPC, VPN)

Troubleshooting

Cross-functional collaboration

Tools

Azure Entra ID

AWS IAM

Key Vault

Microsoft Defender for Cloud

Job description

We are seeking a skilled Cloud Engineer with strong knowledge of cloud platforms such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP). The ideal candidate will have experience implementing and managing cloud infrastructure, applying cloud security controls, and supporting identity and access management. The candidate should also possess a solid understanding of cloud networking, security best practices, scripting, and compliance requirements.

Key Responsibilities

• Design, configure, implement, and maintain cloud infrastructure across Microsoft Azure, AWS, or Google Cloud Platform.
• Implement and manage cloud security controls, including Identity and Access Management (IAM), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security principles.
• Support cloud encryption, security monitoring, and compliance requirements.
• Manage identity and access solutions using Microsoft Entra ID, AWS IAM, Azure Key Vault, Microsoft Defender for Cloud (formerly Azure Security Center), or equivalent tools.
• Configure and maintain cloud networking components, including Virtual Networks (VNets), Virtual Private Clouds (VPCs), VPNs, ExpressRoute, Direct Connect, DNS, load balancers, firewalls, and Network Security Groups.
• Develop and maintain automation scripts using PowerShell, Python, Bash, or similar scripting languages.
• Monitor cloud environments, troubleshoot infrastructure and connectivity issues, and implement appropriate resolutions.
• Apply cloud security best practices to protect infrastructure, identities, applications, and data.
• Support cloud infrastructure maintenance, configuration management, and operational activities.
• Collaborate with security, networking, infrastructure, and application teams to ensure reliable and secure cloud operations.

Required Skills and Qualifications

• Strong hands-on experience with Microsoft Azure, AWS, or Google Cloud Platform.
• Solid understanding of cloud security controls, IAM, RBAC, MFA, Zero Trust, encryption, and compliance requirements.
• Experience with Microsoft Entra ID, AWS IAM, Key Vault, Microsoft Defender for Cloud, or equivalent cloud security solutions.
• Knowledge of scripting languages such as PowerShell, Python, or Bash.
• Strong understanding of cloud networking concepts, including VNets/VPCs, VPNs, ExpressRoute/Direct Connect, DNS, load balancers, firewalls, and Network Security Groups.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to work collaboratively with cross-functional technical teams.