Cybersecurity Cloud Engineer, Principal

Dayforce; Canada; Remote; CAD 120,000 - 150,000; Full time

Job summary

A leading global human capital management company is seeking a Principal Cloud Security Engineer. This role involves designing and maintaining cloud security solutions in Azure and AWS, ensuring compliance with security standards, and fostering a strong security culture across teams. The ideal candidate will have extensive experience in security engineering and a passion for mentoring others.

Benefits

Excellent time-off policies

Wellness initiatives

Competitive pay and benefits

Community impact through volunteer days

Qualifications

• 10+ years of experience in a security engineering role.
• Fluency in security automation using scripting or programming languages.
• Experience working in agile Scrum project methodologies.

Responsibilities

• Design, build, operate, and maintain scalable cloud security solutions.
• Develop and enforce secure cloud standards.
• Cross-functional collaboration to implement best-in-class DevSecOps practices.

Skills

Security Automation

Cloud Security

DevSecOps

Mentoring

Education

Certified Cloud Security Professional (CCSP)

Certified Information Systems Security Professional (CISSP)

Azure Architect Expert

AWS Certified Security Specialty

Tools

Terraform

Prisma

Azure Policy

GuardDuty

CloudTrail

Inspector

Macie

JFrog Artifactory

Job description

Posted Friday, April 25, 2025 at 4:00 AM | Expires Thursday, June 26, 2025 at 3:59 AM

Dayforce is a global human capital management (HCM) company headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and the Asia Pacific Japan (APJ) region. Our award-winning Cloud HCM platform offers a unified solution database and continuous calculation engine, driving efficiency, productivity, and compliance for the global workforce. Our brand promise - Makes Work Life Better TM - reflects our commitment to employees, customers, partners, and communities globally.

Location: Work is what you do, not where you go. For this role, we are open to remote work and can hire anywhere in the United States or Canada.

About the opportunity

Dayforce is seeking a Principal Cloud Security Engineer to join our global Cybersecurity organization. This role is responsible for hands-on build and support for complex cloud security solutions in Azure and AWS. The individual will work in close partnership with Cybersecurity Architects, Technology and P&T teams, and interface across all business areas.

What you'll get to do

1. Design, Build, Operate, and Maintain scalable cloud security solutions across Azure and AWS. Use your deep technical knowledge for hands-on engineering and implementation of cloud security capabilities, and implement processes and technical controls to support cloud security standards.
2. Develop and Enforce secure cloud standards, ensuring compliance with security and regulatory requirements.
3. Enhance Container and Kubernetes security posture to ensure secure orchestration, deployment, and runtime protection.
4. Build automation and tooling to enforce cloud security policies, integrate security into development workflows, and improve operational efficiency.
5. Establish reporting to measure risk and demonstrate progress on KRIs. Tune policies against industry-standard frameworks such as NIST, CIS, STIG.
6. Develop Security detections, run application and environment vulnerability scans, and work with infrastructure/development teams and product managers on addressing risks.
7. Cross-functional Collaboration to be a security champion in implementing best-in-class DevSecOps practices, collaborate, contribute, and influence security best practices to cloud engineering teams, and ensure consistent implementation. Foster a strong security culture and drive proactive improvements.

Skills and experience we value

1. 10+ years of experience in a security engineering role.
2. Fluency in security automation using one or more scripting or programming languages.
3. In-depth knowledge of IaC and Terraform, building and operating CI/CD pipelines, and contributing to secure IaC code to harden cloud infrastructure.
4. Proven expertise in cloud security technology, identity, data, and network engineering in AWS and Azure.
5. Deep understanding of security principles, architecture, and best practices. Establishing security guardrails for infrastructure build and experience building, deploying, and maintaining cloud security solutions and capabilities.
6. Hands-on experience with CNAPP tools such as Prisma, cloud-native tools such as Azure Policy, GuardDuty, CloudTrail, Inspector, Macie, JFrog Artifactory, ACR/ECR.
7. Experience implementing automation within CI/CD pipelines.
8. Knowledge of containerization and orchestration technologies, automating vulnerability management, and implementing guardrails.
9. Experience working in agile Scrum project methodologies.
10. Passion for mentoring others.
11. Industry certifications, such as:
    • Certified Cloud Security Professional (CCSP)
    • Certified Information Systems Security Professional (CISSP)
    • Azure Architect Expert
    • AWS Certified Security Specialty

What’s in it for you

Dayforce values diversity and is an equal opportunity employer. We believe our employees should be happy and healthy, with opportunities for personal and professional growth. We offer excellent time-off policies, wellness initiatives, and competitive pay and benefits.

We are committed to community impact through volunteer days and our charity, Dayforce Cares, supporting your growth both professionally and personally. Our focus is on helping you become the best version of yourself.

About the Salary Ranges

Please note that the salary range mentioned is a guide. Final compensation may vary based on factors such as experience, skills, location, and incentives. We are committed to providing a fair, equitable, and competitive package.

Fraudulent Recruiting

Beware of fraudulent recruiting. Legitimate Dayforce contacts will use an @dayforce.com or @Ceridian.com email address. We do not request money, checks, equipment orders, or sensitive personal data during recruitment. If you suspect fraud, please refer to our fraudulent recruiting statement at this link.