Cloud Security Engineer

TMX Group; Toronto; Hybrid; CAD 120,000 - 123,000; Full time

Job summary

TMX Group is seeking a Cloud Security Engineer to design, deploy, and maintain security technologies supporting a defense-in-depth strategy across multi-cloud environments. You will collaborate with Security Engineering, Cloud Technology, and Infrastructure Support to drive risk mitigation and compliance.

Reporting to the Manager of Security Engineering, this role emphasizes architecture, threat intelligence, and automation.

Qualifications

• Hands-on experience securing major cloud providers (AWS, Azure, or GCP).
• Design and implement RBAC/ABAC, SSO, and least-privilege in enterprise multi-account setups.
• Proficiency with IaC tools and embedding security into CI/CD pipelines.

Responsibilities

• Lead implementation and operation of security technologies across TMX multi-cloud environments.
• Design resilient security architecture and controls for threat protection and incident response.
• Analyze threat/vulnerability feeds and validate control efficacy with risk-based remediations.
• Influence cloud security programs and ensure alignment with TMX policies and standards.
• Monitor compliance and partner with stakeholders to manage cloud security risk.
• Develop security metrics and automated governance for ongoing compliance and proactive threat mitigation.
• Advise internal teams on cloud threats and regulatory expectations; mentor technical partners.

Skills

Cloud security

IAM

IaC DevSecOps

Automation scripting

Data protection

Network security ZTA

Container security

Threat modeling

Tools

Terraform

CloudFormation

Kubernetes

CI/CD tooling

Vault/HSM

Job description

Venture outside the ordinary - TMX Careers The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team. Ready to be part of the action? The Cloud Security Engineer is responsible for researching, deploying, and maintaining security technologies that support our defense-in-depth strategy in accordance with TMX regulations and guidelines.

Reporting to the Manager of Security Engineering, the Cloud Security Engineer is responsible for the design, planning, testing, implementation, and administration of industry-accepted cybersecurity principles, practices, and systems. This role ensures the protection of information assets processed, stored, or transmitted across TMX Group’s multi-cloud instances. As a vital member of the Information Security Team, you will act as the key liaison between Security Engineering, Cloud Technology, and Infrastructure Support teams to drive security alignment, risk mitigation, and compliance.

Job Location: Hybrid (2-3 days/week in office) - based in Toronto, ON.

Key Accountabilities

• Cloud Security Operations & Operations Support: Lead the implementation, configuration, and day-to-day operation of cybersecurity technologies within TMX Group multi-cloud environments across various business units.
• Architecture & Resilient Design: Assist in designing and implementing resilient information security architecture and controls for optimal threat protection, continuous monitoring, and effective Incident Response in the cloud.
• Vulnerability Analysis & Threat Intelligence: Analyze threat and vulnerability feeds for applicability to TMX’s cloud footprint; perform compensating controls analysis, validate control efficacy, and resolve false-positive finding assessment results.
• Cross-Functional Collaboration & Influence: Act as the primary liaison between Security Engineering and Cloud Infrastructure teams, influencing internal partners to ensure cloud solutions align with TMX policies, architectural standards, and security programs.
• Risk Management & Compliance Monitoring: Monitor and advise on IT-related security compliance, partnering with stakeholders to execute risk management workflows that identify, remediate, and report on cloud security risks.
• Automation & Continuous Improvement: Develop and implement key security metrics, measurement criteria, and automated governance to ensure ongoing compliance, control verification, and proactive threat mitigation.
• Stakeholder Support & Guidance: Advise internal teams on emerging cloud threats, regulatory expectations, and standard methodologies while providing mentorship to technical partners.

Must Have(s)

• Cloud Platform Expertise: Hands-on experience securing at least one major cloud provider (AWS, Azure, or GCP), with deep technical knowledge of native security configurations, compute, storage, and network models.
• Identity & Access Management (IAM): Proven ability to design and manage Role-Based Access Controls (RBAC), Attribute-Based Access Controls (ABAC), federation (SAML/OIDC), Single Sign-On (SSO), and strictly enforce least privilege in multi-account enterprise architectures.
• Infrastructure as Code (IaC) & DevSecOps: Proficiency with automation tools such as Terraform or AWS CloudFormation, with experience embedding security testing directly into CI/CD pipelines to enforce automated guardrails.
• Automation & Scripting: Strong scripting/coding skills for automating repetitive security tasks, log parsing, API integrations, and automated remediation workflows.
• Data Protection & Cryptography: Advanced knowledge of data-at-rest and data-in-transit encryption, Key Management Services (KMS), Hardware Security Modules (HSM), and enterprise secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager).
• Network Security & Zero Trust: In-depth experience with VPC design, micro-segmentation, Web Application Firewalls (WAF), egress filtering, and implementing Zero Trust Architecture (ZTA) principles.
• Container & Orchestration Security: Practical experience securing containerized workloads and platforms (e.g., Kubernetes), including network policy enforcement, secrets protection, and runtime security.
• Threat Modeling & Assessment Methodologies: Strong understanding of threat modeling frameworks, impact levels, and security assessment approaches (black, gray, and white-box testing).

Salary Range: 120K/year - 123K/year CAD. Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

In the market for... Excitement - Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success. Connection - With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work. Impact - More than a platform, we use our talents to power mission-critical systems that drive global economic advancement, innovation, and growth. As well, our employee-led Team Impact spreads social good via our giving strategy. Wellness - From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger "we". Plus, with a cloud-first and hybrid workstyle, as well as generous time-off and leaves, we support a life well lived! Growth - From a growth mindset in our work, to expansion in our business, TMX is home to action-takers energized by the achievement of ambitious growth. Ready to enrich your career with impactful work, leaders who truly care, and the flexibility and programs to help you thrive as part of #TeamTMX ?

Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located.

TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate.

We provide accommodations for applicants and employees who require it.

Our Culture:

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team. Ready to be part of the action?

Our Business:

TMX Group operates global markets, and builds digital communities and analytic solutions that facilitate the funding, growth and success of businesses, traders and investors. TMX Group's key operations include Toronto Stock Exchange, TSX Venture Exchange, TSX Alpha Exchange, The Canadian Depository for Securities, Montréal Exchange, Canadian Derivatives Clearing Corporation Trayport and VettaFi, which provide listing markets, trading markets, clearing facilities, depository services, etc. For more information about TMX Group, visit www.tmx.com.

Follow TMX Group on Twitter: @TMXGroup.