Cloud Security Specialist

Medfar; Montreal (administrative region); On-site; CAD 110,000 - 140,000; Full time

Benefits offered by this job

Healthcare insurance from day one

RRSP contribution

Paid time off: 3 weeks + 1 extra week

Job summary

Medfar Clinical Solutions in Canada seeks a Cloud Security Specialist to integrate security across R&D, leading secure software architecture and Azure-based CI/CD. You will mentor teams, run internal security assessments, and ensure robust authentication and governance.

You’ll drive DevSecOps practices, stay ahead of threats, and help shape a security-focused roadmap in a hybrid or remote role from Quebec.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• Proven DevSecOps experience with Azure, security in SDLC, and CI/CD.
• Knowledge of penetration testing tools/methodologies and auth/web security basics.
• Experience designing secure CI/CD pipelines with code quality tools.
• Ability to lead and mentor teams; strong communication and collaboration.
• Certs such as CISSP, Security+ or OSCP are a plus.

Responsibilities

• Lead design and implementation of secure software architecture and CI/CD for .NET on Azure.
• Incorporate security best practices and tools to ensure code quality and security.
• Provide technical leadership and mentorship to development teams.
• Conduct internal security assessments and vulnerability remediation.
• Design and deploy robust authentication and access control systems.
• Drive DevSecOps integration across the development lifecycle.
• Stay current on threats and mitigations; document security configurations and audits.

Skills

DevSecOps

Azure

Penetration testing

CI/CD

Security architecture

Team leadership

Security mentoring

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SonarQube

Azure DevOps

CI/CD pipelines

Job description

MEDFAR Clinical Solutions was founded in 2010 by two aeronautical engineers who realized that the healthcare system was not exploiting the full potential of technology. Supported by a large community of medical experts and focused on clinical success and patient safety, MEDFAR was the first company to certify a cloud-based Electronic Medical Record in Canada: MYLE (Make Your Life Easy).

Committed to promoting excellence and effectiveness in healthcare worldwide, MEDFAR differentiates itself by offering a unique healthcare management solution for clinics, which replaces inefficient processes with a faster and safer technological alternative.

Job Description

As a Cloud Security Specialist, you will lead the integration of security practices within our R&D department. You will be helping our development teams to design, implement, and maintain secure, scalable, and efficient software architecture. You will ensure that security is baked into every step of the software development lifecycle. Your work will directly impact the security posture of our applications and services, ensuring the integrity and reliability of our deployments.

What you'll do:

Lead the design and implementation of secure software architecture, CI/CD pipelines for .NET applications on Azure, integrating security best practices and tools to ensure code quality and security.

Provide technical leadership and mentorship to the development teams as well as collaborate to establish a security-focused roadmap.

Assist with internal penetration testing duties and security assessments for our cloud infrastructure and applications, identifying vulnerabilities and implementing effective mitigation strategies.

Help design and deploy robust authentication systems, enhancing the security of user data and access controls.

Drive the integration of DevSecOps practices into the development lifecycle, ensuring continuous security from code to cloud.

Collaborate with development teams to incorporate .NET security features and best practices into application design and deployment.

Stay updated on the latest in security threats, vulnerabilities, and mitigation technologies, adapting our strategy to continuously protect against risks.

Develop and maintain comprehensive documentation on security configurations, procedures, and audits.

Provide technical leadership and mentorship to our teams on DevSecOps best practices, tools, and technologies.

Work closely with cross-functional teams to ensure compliance with all regulatory and industry security standards and certifications.

Qualifications

Who you are:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Proven experience as a DevOps Engineer or similar role with a strong focus on security and DevSecOps practices, preferably in an Azure environment.

Knowledge and experience of penetration testing tools and methodologies, along with a deep understanding of authentication protocols, application security, and web security principles.

Proficient in designing and implementing CI/CD pipelines, with a solid grasp of tools like SonarQube, ensuring code quality and security.

Familiarity with Microsoft and .NET ecosystem security features, best practices, and the integration of security into CI/CD pipelines.

Demonstrated ability to lead and mentor teams in the adoption of DevSecOps practices.

Excellent problem-solving skills with the ability to work independently or as part of a team.

Strong communication and leadership skills, with the capability to guide and influence technical teams and stakeholders.

Relevant certifications (e CISSP, Security+, A+, OSCP, OSCE, OSWE, Azure Security Engineer, DevSecOps, etc.) are highly desirable.

Working conditions:

Contract: Permanent, full-time (40h/week)

Working mode: Hybrid or remote

Occasional in-office presence may be required during the year (for events or team meetings, for example).

Candidates must reside in the province of Quebec.

Additional Information

Remote work and flexibility (supporting work-life balance)

RRSP contribution

Healthcare insurance from day one

Paid time off: 3 weeks + 1 additional week between Christmas and New Year

Annual training allowanceto support your professional development

An onboarding program to help you get familiar with our environment and the digital healthcare field

All IT equipment is provided, with additional gear if needed

Internal growth opportunities (promotions, internal mobility)

Support from a wellness and social committee, with initiatives to foster team cohesion, mental health, and employee well-being

A company culture focused on transparency, collaboration, and innovation

Join a dynamic and innovative environment where your work has a real and wide-reaching impact, helping to modernize healthcare in Canada and internationally

With offices around the world, fluency in both French and English is a must at MEDFAR. Because of the need to communicate with colleagues and/or customers in other provinces or countries, bilingualism enables us to communicate in both languages while promoting the use of French.

At MEDFAR, we value diversity, equity and inclusion within our team. We are committed to providing a work environment where every individual feels respected and supported, regardless of their background, identity or abilities.As part of our commitment to a fair and inclusive recruitment process, we offer accommodation to candidates who request it. If you need accommodation during your interview, please let us know so that we can provide you with an adapted experience.

MEDFAR has voluntarily subscribed to an Equal Employment Opportunity Program (EEOP ). We encourage applications from women, visible minorities, ethnic minorities, aboriginal peoples and people with disabilities. When applying, we invite you to complete this section, which enables us to implement our Equal Employment Opportunity Program (EEOP). Self-identification is not compulsory, but may enable you to benefit from hiring or promotion measures if you have the skills required for the job.

To better understand the self-identification process, please consult this guide .