Cloud Security Engineer

Momentum-Financial-Services-Group; Toronto; Hybrid; CAD 140,000 - 190,000; Full time

Benefits offered by this job

Discretionary annual bonus

Health and dental plans

Employee Assistance Program

Retirement plans

Hybrid work environment

Tuition assistance & professional dev

Perkopolis discounts

Job summary

Momentum Financial Services Group seeks a Cloud Security Engineer with deep AWS expertise to secure our cloud infrastructure, applications, and workloads. You will design security controls, ensure compliance, and integrate security into DevOps and engineering workflows across AWS environments.

You will lead incident response planning, drive cloud security best practices, and train teams on risk and controls while supporting a hybrid work model at MFSG.

Qualifications

• 10+ years IT/security experience with 4+ years in AWS cloud security.
• Strong knowledge of AWS-native tools (GuardDuty, Security Hub, Macie, Inspector).
• Experience with IaC and automation (Terraform, CloudFormation, Python, Bash, PowerShell).
• Familiarity with CIS benchmarks, NIST, ISO 27001, SOC2, PCI-DSS, HIPAA.

Responsibilities

• Design and implement AWS security architectures aligned with compliance.
• Assess cloud security risks and support audits across AWS environments.
• Manage AWS IAM, Organizations, and Control Tower—enforcing least privilege.
• Deploy AWS-native security services (GuardDuty, Shield, WAF).
• Configure encryption solutions (KMS, CloudHSM, ACM, Secrets Manager).
• Integrate logging/monitoring with SIEM platforms for threat detection.
• Embed security in CI/CD with DevOps teams; automate with IaC.

Skills

AWS Cloud Security

Security Architecture

Threat Detection

RBAC / IAM

DevSecOps

Vulnerability Assessment

SIEM / SOAR

Encryption

Zero Trust

Education

Bachelor's degree in Computer Science or related field

AWS Security Specialty or CISSP/SA

Tools

Terraform

CloudFormation

Python

Bash

PowerShell

AWS IAM

KMS / CloudHSM

Job description

Who We Are

At Momentum Financial Services Group, we help people move forward by reimagining how money works for those who need it most. With more than 40 years of experience, we're the team behind Money Mart-Canada's largest non-bank branch network, and a leader in financial solutions for underserved communities.

From short-term loans to money transfers and prepaid cards, we power the products, technology, and operations that connect over a million customers a year to the money they need, when they need it.

At MFSG, we come together across teams and departments to create something bigger than ourselves: solutions that remove barriers and give people access to money they might not get anywhere else. Whether you're solving problems, building systems, or shaping strategy, your work fuels real support for real people.

Compensation Philosophy

Our strategy is simple-we aim to match the market. We regularly review industry standards to ensure our total rewards package is competitive and fair.

Discretionary Annual Bonus

Enjoy the opportunity for a discretionary bonus based on individual performance and company success.

Comprehensive Benefits

Our benefits include health and dental plans with 100% of the premiums covered. We also offer an Employee Assistance Program to support your mental well-being and provide resources for personal challenges.

Retirement Plans

Plan for your future with our robust retirement savings options, ensuring you're set for the long haul.

Hybrid Work Environment

Experience the best of both worlds with our hybrid work model, allowing you to balance remote work with in-office. When you're at our corporate head office, enjoy a relaxed and collaborative environment featuring breakout rooms for brainstorming and unwinding, plus a variety of snacks to keep you energized throughout the day.

Perks and Rewards

Enjoy reimbursement for tuition assistance and professional development, discounts through Perkopolis and participate in our rewards and recognition programs to celebrate your contributions.

The Job: Cloud Security Engineer

We are seeking a Cloud Security Engineer with deep AWS expertise to secure our cloud infrastructure, applications, and workloads. This role is responsible for designing and implementing security controls, ensuring compliance, and integrating security into DevOps and engineering workflows. You will be a key player in protecting our AWS environments and driving cloud security best practices across the organization.

What You’ll Do

• Design and implement AWS security architectures aligned with compliance and industry best practices
• Assess cloud security risks, enforce security policies, and support audits across AWS environments
• Manage AWS IAM, Organizations, and Control Tower to enforce least privilege and role-based access controls
• Deploy and manage AWS-native security services (Security Hub, GuardDuty, Macie, Inspector, WAF, Shield)
• Configure and maintain encryption solutions (AWS KMS, CloudHSM, ACM, Secrets Manager)
• Integrate AWS logging and monitoring (CloudTrail, CloudWatch, Config) with SIEM platforms for threat detection
• Secure networks via AWS VPCs, Security Groups, ACLs, and PrivateLink
• Work with DevOps to embed security in CI/CD pipelines using AWS-native and third-party tools
• Automate security with Terraform, CloudFormation, and scripting (Python, Bash, PowerShell)
• Apply container and Kubernetes security practices for AWS EKS, ECS, and Fargate environments
• Conduct vulnerability assessments, penetration testing, and remediation in AWS environments
• Drive compliance with CIS AWS Benchmarks, NIST, ISO 27001, SOC2, PCI-DSS, and HIPAA frameworks
• Develop and test incident response and disaster recovery plans for cloud systems
• Train internal teams on cloud security risks, controls, and emerging best practices

What You’ll Bring to the Table

• 10+ years of IT/security experience with 4+ years focused on AWS cloud security
• Strong knowledge of AWS-native security tools (GuardDuty, Security Hub, Macie, Inspector, WAF, Shield, CloudTrail, CloudWatch)
• Proficiency in encryption and key management using AWS KMS, CloudHSM, and ACM
• Experience with IaC and automation (Terraform, CloudFormation, Python, Bash, PowerShell)
• Skilled in container and serverless security (EKS, ECS, Fargate, Lambda)
• Knowledge of Zero Trust, identity federation, and RBAC in AWS environments
• Experience with vulnerability scanning, penetration testing, and audit readiness in cloud environments
• Familiarity with SIEM and SOAR tools, incident response, and forensic analysis in AWS
• Experience with multi-cloud environments (Azure, GCP) is a plus
• AWS Security Specialty or equivalent certifications preferred (CISSP, Solutions Architect, DevOps Engineer)

Skills That Set You Apart

• Strong problem-solving mindset with the ability to act proactively in fast-paced environments
• Excellent communicator, able to explain security concepts to technical and business stakeholders
• Team-oriented collaborator who integrates security seamlessly into DevOps and engineering workflows
• Dedicated to continuous learning, with a passion for emerging security technologies and threats
• Ethical and business-minded, balancing security best practices with operational needs

Education + Experience

• Bachelor's degree in Computer Science, Cybersecurity, or related field preferred
• Professional certifications such as CISSP, AWS Security Specialty, or equivalent strongly preferred
• Proven track record of leading cloud security initiatives in regulated industries

About MFSG – Our Commitment to Responsible Innovation

At MFSG, we are committed to building innovative solutions grounded in ethical, transparent, and responsible use of data and technology. Aligned with the principles outlined in Canada's Artificial Intelligence and Data Act (AIDA), we take a proactive approach to ensuring that any AI or data-driven systems we use are safe, fair, and accountable.

This posting is for a current position within our organization, offering the opportunity to contribute to meaningful, responsible innovation that supports our employees, clients, and communities.

We prioritize strong data governance, clear communication around how systems work, and safeguards that reduce risks and protect individuals. Our focus is on developing tools and processes that promote equity, reliability, and trust, supported by ongoing monitoring and continuous improvement.

Joining MFSG means contributing to a future-focused organization that values both innovation and integrity, where your work helps shape solutions that responsibly support our employees, clients, and communities.

Diversity, Equity and Inclusion

Momentum Financial Services Group (MFSG) integrates questions about diversity, including race and ethnicity, into its job application process to support its commitment to equity, diversity, and inclusion. These questions are designed to collect demographic information for the purpose of analyzing and improving hiring practices, ensuring they are inclusive and equitable. Applicants have the option to disclose their demographic information. Choosing not to provide this information will not affect their application status.