Consultant, Cloud Security Architect

Avanade Inc.; Toronto; Hybrid; CAD 96,000 - 115,000; Full time

Job summary

A leading technology consulting firm is seeking a Cloud Security Architect in Toronto to enhance the security of clients’ cloud environments. Responsibilities include assessing cloud infrastructures, providing security recommendations, and collaborating with client teams. Candidates should have significant experience with Azure security services and relevant certifications. This role promotes professional growth and offers a dynamic work environment.

Benefits

Exceptional development and training opportunities

Real-time access to global resources

Dedicated career advisor

Qualifications

• 5+ years of experience in cloud security architecture and assessment.
• Strong knowledge of Azure security architecture and cloud-native security patterns.
• Ability to communicate complex security concepts clearly.

Responsibilities

• Assess security posture of customer cloud environments.
• Recommend security interventions aligning with best practices.
• Conduct thorough security risk assessments.

Skills

Cloud Security Architecture

Azure Security Services

Vulnerability Management

Risk Assessment

Bilingual (English/French)

Education

Microsoft Certified: Cybersecurity Architect Expert

ITIL Foundation Certification

Tools

Microsoft Defender for Cloud

Sentinel

Azure AD (Entra ID)

Job description

Consultant, Cloud Security Architect

Overview

Avanade is seeking a Cloud Security Architect to lead the charge in securing our clients’ cloud environments. In this role, you’ll assess cloud infrastructures, uncover vulnerabilities, and design tailored remediation strategies that strengthen security and ensure compliance.

You’ll combine deep technical expertise with a strategic mindset, focusing on both hands‑on security controls and governance frameworks. As a trusted advisor, you’ll work directly with clients—guiding them through security assessments, architecture reviews, and implementation roadmaps that support scalable, secure cloud operations.

What you’ll do

• Assess the security posture of customer cloud workloads and environments to identify vulnerabilities and gaps.
• Recommend and design security interventions aligned with best practices and compliance requirements.
• Evaluate and strengthen configurations for Azure security services, including Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), Privileged Identity Management (PIM), Azure Policy, and governance and observability tools such as Azure Monitor and Log Analytics.
• Lead and facilitate security architecture workshops, risk assessments, and governance reviews with client teams.
• Collaborate with cross‑functional teams to ensure alignment between security, operations, and business objectives.
• Conduct thorough security risk assessments and ensure mitigation strategies are implemented.
• Drive continuous improvement of security processes and controls based on evolving threat landscapes and compliance frameworks.
• Ensure adherence to industry frameworks and regulations such as NIST, ISO/IEC 27001, HIPAA, GDPR, and FedRAMP.

Skills and experiences

Required skills

• 5+ years of experience in cloud security architecture and assessment, specifically within Microsoft Azure environments.
• Deep knowledge of Azure security architecture and cloud‑native security resiliency patterns.
• Strong experience with security frameworks and methodologies (e.g., NIST CSF, ISO/IEC 27001).
• Proficient in vulnerability management, risk assessment, and security compliance standards.
• Ability to communicate complex security concepts clearly to both technical and non‑technical stakeholders.
• Strong written and verbal communication and documentation skills.
• Hands‑on experience with Azure security and governance services: Microsoft Defender for Cloud, Sentinel, Key Vault, Azure AD (Entra ID), PIM, Azure Policy, Azure Monitor, and Log Analytics.
• Familiarity with Microsoft Security Assessments, such as the Well‑Architected Review Assessment (WARA) and Microsoft Security Assessment Frameworks.
• Experience working directly with clients in customer‑facing roles to deliver security assessments and solutions.
• Solid understanding of process governance, security incident response planning, and Major Incident Response Plan (MIRP) development.
• Bilingual (English/French).

Required certifications

• Microsoft Certified: Cybersecurity Architect Expert
• ITIL Foundation Certification
• Active Security Clearance

Preferred skills

• Strong consulting experience with direct client engagement and workshop facilitation.
• Bilingual proficiency is highly valued, as it enhances communication and collaboration across diverse client teams and global environments.
• Familiarity with SOC integration, security operations center workflows, and incident response coordination.
• Experience with compliance frameworks such as HIPAA, GDPR, FedRAMP, or equivalent.
• Expertise with SIEM/SOAR tools, automation, and security orchestration.
• Proven track record delivering executive‑level security architecture reviews and recommendations.

About you

• Consultative, collaborative, relationship builder
• Resilient, adaptable, flexible
• Intellectually curious and passionate about Microsoft Technologies (M365 Threat Protection)
• Problem‑solver, patient and quality‑driven
• Self‑motivating
• Innovative mindset
• Future‑focused and aware of emerging technologies in the Cyber Defense space

Enjoy your career

• Opportunity to work for Microsoft’s Global Alliance Partner of the Year (14 years in a row), with exceptional development and training (minimum 80 hours per year for training and paid certifications)
• Real‑time access to technical and skilled resources globally
• Dedicated career advisor to encourage your growth
• Engaged and helpful coworkers genuinely interested in you

Find out more about some of our benefits here.

Compensation

Toronto, Calgary, Vancouver, Ottawa: $96,800 - $114,950

EEO Statement

Avanade believes that all persons are entitled to equal employment opportunities, and we do not discriminate against our employees, applicants, or job seekers because of their race, color, gender, religion, national origin, disability, veteran status, age, marital status, sexual orientation, genetic information, gender identity, or any other protected group status as defined by law.

References

• https://www.avanade.com/en-gb/career/benefits
• https://www.avanade.com/en-us/about/responsible-business
• https://www.avanade.com/en/thinking/research-and-insights/avanade-presents/cybersecurity-for-nonprofits
• https://www.avanade.com/en/blogs/avanade-insights/security/catastrophic-cyber-attack