Cloud Security Engineer will be responsible for designing, implementing, maintaining, and operating cloud security capabilities across a multi-cloud environment.

S.I. Systems Ltd.; Toronto; On-site; CAD 110,000 - 160,000; Full time

Job summary

S.I. Systems Ltd. in Toronto, Canada, is seeking a Cloud Security Engineer to design, implement, and operate cloud security capabilities across a multi-cloud environment.

This hands-on role collaborates with Security, Infrastructure, Architecture, and Technology teams to advance security posture and drive enterprise-wide integration. You will work with Azure, GCP, and OCI, leveraging IaC and policy as code to enable secure cloud deployments and effective vulnerability remediation across

Qualifications

• 5+ years as a Cloud Security Engineer supporting enterprise cloud environments.
• Hands-on experience securing Azure and GCP environments.
• Experience with Infrastructure as Code and policy automation.
• Experience with CSPM and CNAPP solutions.

Responsibilities

• Deploy, configure, and maintain cloud security tools including CSPM and CNAPP.
• Design and implement cloud security controls across Azure, GCP, and OCI.
• Create and maintain IaC and Policy as Code frameworks.
• Lead vulnerability management and remediation across cloud environments.
• Provide security visibility with centralized reporting and metrics.

Skills

Cloud security engineering

Azure

GCP

CNAPP

CSPM

IaC

Policy as Code

Vulnerability management

Security reporting

Multicloud tooling

Job description

Cloud Security Engineer will be responsible for designing, implementing, maintaining, and operating cloud security capabilities across a multi-cloud environment.

The Cloud Security Engineer will be responsible for designing, implementing, maintaining, and operating cloud security capabilities across a multi-cloud environment. This role will support the ongoing integration of newly acquired technology platforms while enhancing the organization's cloud security posture through security tooling, vulnerability management, remediation initiatives, and cloud security best practices.

The successful candidate will work closely with Security, Infrastructure, Architecture, and Technology teams to drive cloud security initiatives, improve visibility across cloud platforms, and support enterprise-wide integration efforts. This is a hands-on engineering role requiring both technical depth and strong communication skills.

Must-Have Qualifications

Cloud Security Engineering

• 5+ years of experience as a Cloud Security Engineer supporting enterprise cloud environments
• Hands-on experience securing Azure and GCP environments
• Experience with Infrastructure as Code (IaC), Policy as Code, and cloud security automation
• Experience implementing and managing Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) solutions

Vulnerability Management & Remediation

• Experience operating enterprise vulnerability management programs across cloud and infrastructure environments
• Strong understanding of:
• Vulnerability assessment
• Agent-based scanning
• Agentless scanning
• Security reporting and metrics
• Experience partnering with infrastructure and engineering teams to drive remediation efforts and reduce organizational risk

Cloud Integration & Security Operations

• Experience designing and implementing cloud security controls across multi-cloud environments
• Experience integrating security tooling, processes, and reporting across multiple cloud platforms
• Ability to translate security architecture requirements into practical engineering solutions
• Hands-on experience building integrations and security workflows

Security Frameworks & Governance

• 3+ years working with established security frameworks such as:
• PCI-DSS
• NIST
• ISO 27001
• Microsoft Cloud Security Benchmark (MCSB)

Communication & Stakeholder Management

• Strong communication and collaboration skills
• Ability to communicate technical findings, remediation strategies, and security risks to both technical and non-technical stakeholders
• Experience supporting initiatives with executive-level visibility

Nice-to-Have Qualifications

• Experience securing Oracle Cloud Infrastructure (OCI)
• Financial Services or Banking industry experience
• Experience supporting merger, acquisition, migration, or large-scale technology integration programs
• Exposure to AI security, AI enablement, or securing AI-related cloud infrastructure
• Experience with Kubernetes security and container security platforms
• Experience with Helm Charts
• Security certifications such as:
• CISSP
• CCSK
• CCSP
• Azure Security Engineer Associate

Key Responsibilities

Cloud Security Engineering

• Deploy, configure, and maintain cloud security tools including CSPM, CNAPP, Cloud Security, and Vulnerability Management platforms
• Design and implement cloud security controls across Azure, GCP, and other cloud platforms
• Create and maintain Infrastructure as Code (IaC) and Policy as Code frameworks

Vulnerability Management

• Lead vulnerability identification, prioritization, reporting, and remediation efforts across cloud environments
• Collaborate with infrastructure, engineering, and application teams to ensure timely remediation of security findings
• Develop scalable remediation workflows and processes

Cloud Security Integration

• Support the integration and consolidation of cloud security capabilities across multiple technology environments
• Centralize security visibility and reporting across cloud platforms
• Enhance security monitoring, governance, and operational processes

Security Advisory & Leadership

• Provide guidance and best practices to technology and business teams on cloud security matters
• Develop documentation, standards, processes, and procedures
• Support leadership reporting through meaningful metrics, KPIs, and security posture measurements
• Stay current with emerging cloud security threats, technologies, and industry best practices

Environment

• Azure
• Google Cloud Platform (GCP)
• Oracle Cloud Infrastructure (OCI)
• CSPM / CNAPP Platforms
• Vulnerability Management Solutions
• Infrastructure as Code (Terraform, ARM, etc.)
• Policy as Code
• Cloud Security Automation

Disclaimer:
AI may be used in evaluating candidates.
This posting is for an existing vacancy.