Lead III - Cloud Engineer

S&P Global; Toronto; On-site; CAD 170,000 - 315,000; Full time

Job summary

A leading financial services company is seeking experts in cloud architecture and security to ensure effective cloud management. Responsibilities include designing secure architectures, enforcing policies, and collaborating with stakeholders. Ideal candidates should possess at least 15 years of experience, particularly with AWS, IAM, and security audits. The position offers a competitive salary ranging from $125,000 to $230,000, and eligibility for an annual incentive plan and comprehensive benefits.

Qualifications

• Experience in cloud architecture and security, preferably in AWS.
• Experience with information security audits.
• Experience collaborating with technical and business stakeholders.
• Around 15 years of experience in cloud engineering/architecture/security.

Responsibilities

• Ensure Cloud Posture Management.
• Lead cloud modernization with a security first approach.
• Design secure, scalable, and resilient cloud architectures.
• Define and enforce cloud security policies, standards, and controls.
• Evaluate and recommend cloud‑native security tools and services.
• Drive automation of security controls and compliance monitoring.

Skills

Cloud architecture

Information security audits

Identity and Access Management (IAM)

Encryption

Network security

Container security

Single Sign-On (SSO)

Privileged access management tools

Centralized IDP integration

Job description

Responsibilities and Impact

• Ensure Cloud Posture Management.
• Lead cloud modernization with a security first approach.
• Design and implement secure, scalable, and resilient cloud architectures (AWS, Azure, GCP).
• Define and enforce cloud security policies, standards, and controls.
• Evaluate and recommend cloud‑native security tools and services.
• Drive automation of security controls and compliance monitoring.
• Identify and prioritize risks across cloud assets, including IAM roles.
• Collaborate with BISO/CISO teams to implement best practices.
• Engineer solutions in SailPoint for access management and review. Implement access solutions using AWS Secret Manager, create/maintain encryption keys.
• Review and respond to security audits related to access and identity management.
• Develop and lead governance tasks for access and identity management.
• Engineer and implement solutions to integrate cloud‑native services with centralized IDPs like Azure AD and Okta.
• Review new tools/features and engineer solutions according to the infrastructure and application requirements.

Compensation and Benefits Information

S&P Global states that the anticipated base salary range for this position is $125,000 to $230,000. Final base salary for this role will be based on the individual’s geographic location, as well as experience level, skill set, training, licenses and certifications.

In addition to base compensation, this role is eligible for an annual incentive plan. This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here https://spgbenefits.com/benefit-summaries.

What We’re Looking For

Basic Required Qualifications

• Experience in cloud architecture and security, preferably in AWS.
• Experience with information security audits.
• Experience collaborating with technical and business stakeholders.
• Experience with IAM, encryption, network security, and container security.
• Experience managing IDPs like AzureAD, Okta, IDM, etc.
• Experience working with SSO and privileged access management tools.
• Experience integrating application and cloud‑native services with centralized IDPs.

Additional Preferred Qualifications

• Around 15 years of experience in cloud engineering/architecture/security.

Equal Opportunity Employer

S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment.

If you need an accommodation during the application process due to a disability, please send an email to: [e-mail] and your request will be forwarded to the appropriate person.

US Candidates Only

The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. Pay Transparency Nondiscrimination Provision - https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_formattedESQA508c.pdf

Job ID: 312592 | Posted On: 2025-12-19 | Location: Princeton, New Jersey, United States