Cloud Security

LanceSoft, Inc.; Montreal (administrative region); On-site; CAD 90,000 - 130,000; Full time

Job summary

LanceSoft, Inc. in Montreal seeks a seasoned Cloud Security Architect to design, assess, and secure architectures across AWS, Azure, and GCP, with emphasis on IAM, network security, Kubernetes security, and data protection.

The role includes guiding secure migrations from on-premises and operating within highly regulated financial services contexts. You will enable secure-by-design cloud adoption through DevSecOps, threat modeling, and policy-aligned reference architectures, leading

Qualifications

• Proven experience designing, assessing, and securing architectures across public cloud platforms (AWS/Azure/GCP).
• Experience securing cloud migrations from on-premises environments in regulated financial services contexts.
• Strong background in cloud security risk assessments, architecture reviews, and threat modeling.

Responsibilities

• Lead cross-functional engagements to produce security standards, reference architectures, and guidance to scale security across cloud programs.
• Align cloud security designs with enterprise policies, regulatory requirements, and industry standards.
• Advise on secure-by-design cloud adoption through DevSecOps, automation (IaC, CI/CD guardrails, policy-as-code).

Skills

Cloud Security

Threat Modeling

DevSecOps

IaC

Policy-as-Code

Regulatory Compliance

Stakeholder Management

Kubernetes

Identity & Access Mgmt

Architecture Reviews

Job description

Proven experience designing, assessing, and securing architectures across public cloud platforms (one or more of: AWS | Azure | GCP), including identity and access management, network security and connectivity, workload and application security, Kubernetes/container platforms, and data protection with enterprise-grade key management.

This includes securing cloud migrations from on-premises environments and operating within highly regulated financial services contexts.

Cloud Security Risk, Threat Modeling & Policy Alignment

Strong background in performing cloud security risk assessments and architecture reviews, applying threat modeling methodologies, and identifying risks across compute, network, storage, and identity layers. Demonstrated ability to interpret and apply enterprise security policies, regulatory requirements, and industry standards, including scenarios where direct policy guidance is incomplete or evolving.

Experience enabling secure-by-design cloud adoption through DevSecOps and automation (IaC, CI/CD guardrails, policy-as-code), and secure design patterns. Demonstrated ability to lead cross-functional engagements, influence stakeholders, and produce clear security standards, reference architectures, and guidance to scale security across cloud programs.