Cloud Security Engineer (AWS)

Arcadia; Canada; On-site; CAD 160,000 - 165,000; Full time

Job summary

A leading fintech organization seeks an experienced Cloud Security Engineer to enhance its AWS environments. This mid-senior role focuses on designing secure architectures, automating compliance, and embedding best practices in cloud infrastructure. Candidates should have 8–10 years in IT/security with substantial AWS experience. The position offers a hybrid work model in Toronto, ON, with a competitive salary in the range of CA$160,000.00 to CA$165,000.00 per year.

Qualifications

• 8–10+ years in IT/security, with at least 4 years focused on AWS cloud environments.
• Deep hands‑on knowledge of AWS services and native security tools.
• Strong understanding of encryption, IAM, networking, and Zero Trust models.

Responsibilities

• Design and implement secure, compliant AWS architectures across multi‑account environments.
• Manage and harden AWS IAM, Organizations, and Control Tower using least‑privilege principles.
• Deploy and manage AWS-native security tooling—GuardDuty, Security Hub, Macie, Inspector, WAF, Shield.

Skills

AWS services and native security tools

Encryption

IAM and networking

IaC and automation

Excellent communication

Detail-oriented

Tools

Terraform

CloudFormation

Python

Bash

Job description

Join to apply for the Cloud Security Engineer (AWS) role at Arcadia

This range is provided by Arcadia. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base Pay Range

CA$160,000.00/yr - CA$165,000.00/yr

Location: Toronto, ON (Hybrid – 3 days onsite, Tues–Thurs)

About the Role

A leading fintech organization is building out its cloud security function and looking for an experienced Cloud Security Engineer to secure and scale its AWS environments. You’ll design and implement security controls, embed best practices into engineering workflows, and automate compliance across cloud infrastructure.

This is a highly visible, hands‑on role for someone who’s comfortable taking ownership — working across DevOps, engineering, and InfoSec to strengthen the company’s cloud posture while enabling speed and innovation.

What You’ll Do

• Design and implement secure, compliant AWS architectures across multi‑account environments
• Manage and harden AWS IAM, Organizations, and Control Tower using least‑privilege principles
• Deploy and manage AWS‑native security tooling — GuardDuty, Security Hub, Macie, Inspector, WAF, Shield
• Configure encryption and secrets management (KMS, CloudHSM, ACM, Secrets Manager)
• Integrate AWS monitoring and logging (CloudTrail, CloudWatch, Config) with SIEM platforms for threat detection
• Embed security into CI/CD workflows, partnering with DevOps and platform engineering teams
• Automate controls using Terraform, CloudFormation, and scripting (Python/Bash)
• Apply container security best practices across EKS, ECS, and Fargate
• Support vulnerability assessments, incident response, and audit readiness activities

What You Bring

• 8–10+ years in IT/security, with at least 4 years focused on AWS cloud environments
• Deep hands‑on knowledge of AWS services and native security tools
• Strong understanding of encryption, IAM, networking, and Zero Trust models
• Experience with IaC and automation (Terraform, CloudFormation, Python, Bash)
• Familiarity with compliance frameworks such as CIS Benchmarks, ISO 27001, SOC2, and PCI‑DSS
• Excellent communicator who can bridge technical and business conversations
• Proactive, detail‑oriented, and passionate about building secure, scalable cloud systems

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Financial Services and Software Development