Senior Cloud Security Engineer

Healthcare of Ontario Pension Plan Trust Fund Company; Toronto; On-site; CAD 103,000 - 153,000; Full time

Job summary

HOOPP is seeking a Senior Cloud Security Engineer to lead design, implementation, and continuous improvement of security controls across multi-cloud environments (AWS and Azure). You will partner with engineering and operations to embed secure-by-design principles and drive risk-aware decisions that protect critical pension systems and data.

The role emphasizes threat detection, logging, and automation, with opportunities to influence technology strategy and security posture across the

Qualifications

• 7+ years in IT and cybersecurity with enterprise cloud security experience.
• Hands-on AWS security design, implementation, and monitoring with native services.
• Experience with cloud security governance, vulnerability management, and assessments.
• Strong cloud networking, security architecture, and secure design principles.
• IaC and security automation using Terraform or CloudFormation.
• Familiarity with DevSecOps and CI/CD security practices.
• Ability to balance security with usability, cost, and business needs.
• Excellent communication across technical and non-technical teams.

Responsibilities

• Design and enhance cloud security controls across AWS and Azure environments.
• Partner with Cloud Engineering and Infrastructure to embed secure-by-design principles throughout the cloud lifecycle.
• Provide strategic security guidance on cloud architectures and emerging technologies.
• Identify, assess, and remediate cloud security risks and misconfigurations.
• Enhance cloud logging, monitoring, threat detection, and security automation capabilities.
• Conduct security assessments, risk reviews, audits, and technology evaluations.
• Collaborate with Security Operations to investigate security events and drive resolutions.
• Evaluate and adopt emerging technologies, including AI, to improve security outcomes.

Skills

AWS security

Security automation

Terraform

CloudFormation

CI/CD security

Azure knowledge

DevSecOps

Threat detection

Security governance

Education

Bachelor’s degree or equivalent

Tools

Terraform

CloudFormation

AWS Config

GuardDuty

Security Hub

CloudTrail

WAF

IAM

KMS

Azure

Job description

Why you’ll love working here:

• membership in HOOPP’s world class defined benefit pension plan, which can serve as an important part of your retirement security
• competitive, 100% company-paid extended health and dental benefits for permanent employees, including coverage supporting our team's diversity and mental health (e.g., gender affirmation, fertility and drug treatment, psychological support benefits of $2,500 per year, parental leave top-up, and a health spending account).
• optional post-retirement health and dental benefits subsidized at 50% yoga classes, meditation workshops, nutritional consultations, and wellness seminars
• the opportunity to make a difference and help take care of those who care for us, by providing a financially secure retirement for Ontario healthcare workers

Job Summary

HOOPP's Information Technology teams deliver innovative technology solutions to help build a stronger financial future for the healthcare community. As a Senior Cloud Security Engineer, you will have the opportunity to influence technical decisions, challenge existing approaches, and help shape the future of cloud security at HOOPP. Our Information Security Operations team plays a key role in securing HOOPP's cloud environments and supporting our cloud-first strategy. As a Senior Cloud Security Engineer, reporting to the Senior Manager, Information Security Operations, you will be responsible for designing, implementing, and improving security controls, governance, monitoring, and security architecture across our multi cloud environment with a focus on AWS. We cultivate a culture that emphasizes innovation, collaboration, practicality, and the courage to challenge the status quo. This role is well suited to someone who combines technical depth with curiosity, sound judgment, product thinking, systems thinking, and a willingness to test new ideas. You will look beyond immediate symptoms, identify underlying needs, and develop solutions that are secure, sustainable, and valuable in delivering the pension promise. Success in this role requires the ability to navigate ambiguity, ask thoughtful questions, and turn emerging technologies into practical solutions that deliver measurable business impact.

What you will do:

• Design, implement, and continuously enhance cloud security controls, standards, and guardrails across AWS and Azure environments to protect critical business services and data.
• Partner with Cloud Engineering, Infrastructure, and project teams to embed secure-by-design principles throughout the cloud lifecycle and enable scalable, resilient solutions.
• Provide strategic security guidance on cloud architectures, emerging technologies, and platform capabilities, balancing risk management with business objectives.
• Proactively identify, assess, and remediate cloud security risks, vulnerabilities, and misconfigurations to strengthen HOOPP's overall security posture.
• Enhance cloud logging, monitoring, threat detection, and security automation capabilities to improve visibility, operational effectiveness, and response readiness.
• Conduct security assessments, risk reviews, audits, and technology evaluations, providing practical recommendations that support informed decision-making and continuous improvement.
• Collaborate with Security Operations teams to investigate security events, strengthen cloud-focused detection and response capabilities, and drive effective resolution of security issues.
• Evaluate and support the secure adoption of emerging technologies, including AI and automation solutions, identifying opportunities to improve security outcomes, streamline processes, and challenge the status quo through innovation.

What you bring:

• 7+ years of experience in information technology and cybersecurity, including securing enterprise cloud environments.
• Strong hands-on experience designing, implementing, and securing AWS environments using cloud-native security services such as Security Hub, GuardDuty, CloudTrail, AWS Config, KMS, WAF, IAM, and related capabilities.
• Experience with cloud security governance, monitoring, vulnerability management, security assessments, and continuous improvement of security posture.
• Strong understanding of cloud networking, security architecture, and secure design principles.
• Experience with Infrastructure as Code (IaC), security automation, and cloud engineering tools such as Terraform, CloudFormation, or comparable frameworks.
• Knowledge of DevSecOps practices, CI/CD security, AI technologies, and modern engineering tools, including AI-assisted development platforms, is considered an asset.
• Strong problem-solving, analytical, and critical-thinking skills, with the ability to navigate ambiguity, use data to inform recommendations, and develop practical solutions to complex challenges.
• Demonstrated ability to balance security, usability, operational requirements, cost, and business value when making recommendations and decisions.
• Proven ability to build trusted relationships, communicate effectively with technical and non-technical audiences, and collaborate across engineering, infrastructure, architecture, security, and project teams.
• Naturally curious and committed to continuous learning, with a willingness to challenge assumptions respectfully, contribute innovative ideas, take ownership, and drive improvements from concept through implementation.
• Experience securing Microsoft Azure environments is considered an asset.
• Bachelor’s degree in a related field or an equivalent combination of education and practical experience.
• Professional security or cloud certifications are an asset, but not required (e.g., CISSP, CCSP, AWS Solutions Architect Associate or Professional).

undefined) The expected annual base salary range for this role is: $103,000 - $153,000 CAD The actual base salary offered to the successful candidate may vary based on multiple factors including, but not limited to, individual's expertise and level of experience applicable to the role they are being offered. This role is eligible to participate in discretionary incentive plan(s), subject to the terms and conditions of the applicable incentive plan text. This job posting is for a newly created role. HOOPP may use artificial intelligence tools to assist in screening, assessing and selecting applicants for this position. These tools support our recruitment process but do not replace human judgment and decision-making.

About HOOPP

Founded in 1960 by the Ontario Hospital Association, the Healthcare of Ontario Pension Plan (HOOPP) is one of Canada’s strongest and most stable defined benefit pension plans. For over 65 years, HOOPP has delivered on its pension promise to Ontario’s healthcare workers, now serving more than 504,000 members and 870 employers across the province. With offices in Toronto and London, HOOPP manages a global, diversified multi-asset portfolio. One of Canada’s Maple 8 pension plans, HOOPP oversees $132 billion in assets and remains fully funded, supported by strong risk-adjusted returns, stable contribution rates for more than 20 years and independent governance. Our strength is powered by our people who bring HOOPP’s mission, vision and values to life and play a crucial role in helping us succeed. We are a purpose-driven organization committed to building an equitable, diverse and inclusive workplace where different perspectives drive better outcomes. We look for talented, forward-thinking individuals who want their work to have real impact on the lives of others. We believe an equitable, diverse and inclusive (EDI) workplace is integral to cultivating a positive culture. We integrate fair and inclusive practices into our programs and processes, creating equal opportunity and establishing a consistent employee experience across our organization. If you need accommodation at any point in our recruitment process, please advise your recruiter or email us [e-mail] we will be happy to consult with you so that arrangements can be made for reasonable accommodation.