Cyber Security Strategist: IAM & Cloud Defense

Armstrong Fluid Technology; Toronto; On-site; CAD 90,000 - 130,000; Full time

Job summary

Armstrong Fluid Technology in Toronto, Canada, is seeking a seasoned Cybersecurity Engineer to defend our digital assets and infrastructure. You will drive Zero Trust, IAM, and data-protection initiatives across the organization and partner with IT teams and vendors to elevate our security maturity.

You will implement and tune Microsoft Entra CA policies, manage identity lifecycles, patch management with Intune, and harden Exchange Online and Teams.

Qualifications

• Bachelor's degree or equivalent required.
• 5+ years of IT security experience.
• Strong knowledge of security governance standards (NIST, ISO 27001, GDPR, HIPAA) and controls.

Responsibilities

• Manage identity lifecycles with proactive user account controls.
• Enforce Zero Trust across the IT environment using Microsoft IAM and PIM.
• Architect and deploy Entra Conditional Access policies for secure authentication.
• Engineer global patch deployments via Intune to remediate vulnerabilities.
• Harden Exchange Online and Teams with Defender for Office 365 policies and rules.
• Lead incident response and threat containment with IT and security partners.
• Govern data protection with Purview Information Protection to prevent exfiltration.
• Maintain security policies and docs to mature the security posture.
• Conduct risk assessments and provide strategic remediation recommendations.

Skills

IAM

Entra ID

Conditional Access

PIM

Intune

Defender for Office 365

Purview Information Protection

NIST

ISO 27001

GDPR

HIPAA

DLP

Security governance

Data security

Education

Bachelor's degree or equivalent

Tools

Microsoft Entra ID

Microsoft Entra Conditional Access

Privileged Identity Management (PIM)

Microsoft Intune

Defender for Office 365

Microsoft Purview Information Protection

Job description

Armstrong Fluid Technology in Toronto, Canada, is seeking a seasoned Cybersecurity Engineer to defend our digital assets and infrastructure. You will drive Zero Trust, IAM, and data-protection initiatives across the organization and partner with IT teams and vendors to elevate our security maturity.

You will implement and tune Microsoft Entra CA policies, manage identity lifecycles, patch management with Intune, and harden Exchange Online and Teams.