Senior Technical Specialist

ICBC; North Vancouver; Hybrid; CAD 98,000 - 107,000; Full time

Benefits offered by this job

Hybrid work

Pension plan

3 weeks vacation

Extended health coverage

Wellness support

Job summary

ICBC’s Information Services Division is seeking a Senior Technical Specialist to provide senior-level leadership for the design, governance, and operation of cloud security across AWS, Azure, and hybrid environments.

You will guide security teams, implement CNAPP/CSPM/CWPP, and drive risk reduction through IAM, encryption, secrets management, and secure CI/CD. Hybrid work arrangement with in-office presence in North Vancouver.

Qualifications

• Experience securing enterprise workloads in AWS and Azure.
• Knowledge of CNAPP, CSPM, CWPP and cloud posture management.
• Proficient in CI/CD security integration (SAST/DAST/IAST).
• Ability to mentor junior SOC analysts and coordinate teams.

Responsibilities

• Lead cloud security projects across AWS, Azure, and hybrid environments.
• Provide advanced-level cloud security consultation to IT Security and DevOps.
• Assess and validate AWS/Azure security controls including IAM, encryption, and key management.
• Develop cloud-focused monitoring and response use cases using AWS/Azure telemetry.
• Lead or support cloud security incident response and post-incident improvements.

Skills

AWS security services

Azure security services

CNAPP CSPM

DevSecOps

Cloud governance

Incident response

Education

Diploma or degree in CS/IT/Cybersecurity

Cloud security certifications preferred

Tools

Terraform

Powershell

Azure CLI

AWS CloudFormation

GitHub Actions

Job description

Select how often (in days) to receive an alert:

Hours of Work: 7.5 hours per day - 5 day week (M-F)

Work Arrangement: Hybrid 8

Salary Range: $98371.00 - $106561.00 Annually

Location: North Vancouver, British Columbia, Canada

We welcome applications from all qualified job seekers.Should you require any accommodations, including alternative interview formats, assistance with online assessments, or an ASL interpreter, throughout the application or hiring process, please email your request to [e-mail] – we are committed to ensuring an accessible experience for all candidates.

At ICBC, we strive to build diverse teams which reflect the communities we serve. To support this, we’ve created two talent communities for Indigenous Peoples and People with Disabilities . By joining one of these communities, you’ll connect with our recruitment team who will guide you through the application process and help you explore opportunities at ICBC. Of course, you’re welcome to apply for jobs at ICBC whether or not you join a talent community.

We look forward to hearing from you!

The Information Services Division is currently looking for a Senior Technical Specialist. In this position, you will provide senior-level technical leadership for the design, implementation, governance, and operation of cloud security services and controls across Amazon Web Services (AWS), Microsoft Azure, and hybrid environments. You will serve as a cloud security subject matter expert, guide technical teams, and help advance the organization’s cloud security capabilities

Your responsibilities will include:

• Leading, coordinating, and delivering cloud security projects and initiatives of varying complexity across AWS, Azure, and hybrid environments;
• Demonstrating an understanding of cloud security governance frameworks, standards, and benchmarks to support alignment of cloud security initiatives with organizational risk requirements and Enterprise Architecture guidance;
• Providing advanced-level technical consultation as the cloud security subject matter expert to IT Security, Cloud Security Platforms, Architecture, Infrastructure, Application Development, DevOps, and Project teams;
• Assist in the designing, assessing, and validating AWS and Azure security controls, including identity and access management, privileged access, network segmentation, encryption and key management, secrets management, logging and monitoring, workload protection, data protection, backup and recovery, and policy enforcement;
• Assist in establishing and maintaining secure cloud landing-zone requirements, account and subscription guardrails, policy-as-code controls, exception processes, and compliance reporting;
• Leading the technical evaluation, proof of concept, deployment, integration, tuning, and sustainment of Cloud-Native Application Protection Platform (CNAPP), Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), and related capabilities;
• Leading exposure management initiatives across cloud environments, including the identification, prioritization, validation, and remediation of security exposures, vulnerabilities, misconfigurations, and attack paths, and translating findings into practical operational actions and measurable risk reduction outcomes
• Assist in improving cloud application security throughout the system development life cycle by integrating security into CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), infrastructure-as-code scanning, container and image scanning, secrets detection, and supply-chain controls;
• Lead the implementation of WAAP and other application security controls, including API discovery and inventory, authentication and authorization, schema validation, rate limiting, secrets and token protection, vulnerability testing, runtime monitoring, and protection against OWASP API Security Top 10 risks;
• Triaging complex cloud security alerts, vulnerabilities, misconfigurations, and incidents; determining risk and priority; coordinating containment and remediation; and providing clear technical direction to junior SOC analysts and operational teams;
• Developing cloud-focused security monitoring, detection, investigation, and response use cases using relevant AWS, Azure, CNAPP, SIEM, and SOAR telemetry;
• Leading or supporting cloud security incident response activities, including evidence preservation, root-cause analysis, recovery validation, lessons learned, and improvements to preventive and detective controls;
• Defining sustainment roadmaps and service improvements for cloud security platforms and controls, including operational processes, metrics, control ownership, capacity, integrations, licensing, and vendor support;
• Assist in clear technical designs, standards, procedures, risk assessments, decision records, executive summaries, and operational runbooks;
• Acting as a liaison with technology teams, cloud security service providers, vendors, Procurement, Contracts, Legal, Privacy, Risk, Audit, and Finance as required.

Position Requirements

• Significant hands-on experience securing enterprise workloads and services in both AWS and Microsoft Azure, including native security controls and shared-responsibility considerations;
• Demonstrated knowledge of AWS security services such as AWS Organizations, Control Tower, IAM, IAM Identity Center, Security Hub, GuardDuty, Inspector, Macie, CloudTrail, Config, KMS, Secrets Manager, WAF, Shield, Network Firewall, and Security Lake;
• Demonstrated knowledge of Azure security services such as Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure Policy, Defender for Cloud, Microsoft Sentinel, Key Vault, Azure Firewall, Web Application Firewall, Private Link, Network Security Groups, and Azure Monitor;
• Hands-on experience evaluating, deploying, integrating, or operating CNAPP and CSPM technologies, including posture management, workload protection, entitlement management, attack-path analysis, vulnerability management, and cloud asset inventory;
• Strong application and DevSecOps security knowledge, with practical experience integrating security scanning and quality gates into CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, or Jenkins;
• Practical knowledge of container, Kubernetes, serverless, infrastructure-as-code, software supply-chain, and secrets-management security;
• Experience assessing and securing APIs and API gateways, including OAuth 2.0, OpenID Connect, JSON Web Tokens, service identities, authorization models, input validation, abuse prevention, and runtime monitoring;
• Advanced analytical and troubleshooting skills, with experience triaging cloud security alerts and incidents across identity, network, application, workload, and data layers;
• Experience in cybersecurity incident response, including investigation, containment, eradication, recovery, stakeholder coordination, and post-incident improvement;
• Ability to mentor and provide technical guidance to junior SOC analysts, including investigation methodology, escalation criteria, evidence quality, and clear documentation;
• Working knowledge of SIEM/SOAR platforms and cloud security telemetry, preferably Microsoft Sentinel and relevant AWS and Azure logging sources;
• Experience translating technical cloud security risks into practical remediation plans and communicating effectively with technical teams, management, risk owners, auditors, and vendors;
• Ability to manage multiple priorities, lead technical initiatives, and work collaboratively across security, infrastructure, cloud security platform, architecture, and application delivery teams;
• Proven written and verbal communication skills, including the ability to produce standards, architecture guidance, operational runbooks, risk summaries, and executive-ready recommendations.

Education and Professional Certifications

• A diploma or degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or an equivalent combination of education and relevant experience;
• Cloud security certification is preferred; certifications include Certified Cloud Security Professional (CCSP), AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Cybersecurity Architect Expert;
• Additional relevant certifications such as CISSP, GIAC Cloud Security Automation (GCSA), GIAC Public Cloud Security (GPCS), GIAC Cloud Incident Response (GCIR), or Kubernetes security certifications are considered assets.

Preferred Experience

• Experience in a large, complex, regulated enterprise with hybrid and multi-cloud environments;
• Experience with implementing and maintaining modern CNAPP and CSPM platforms;
• Experience with security automation using Terraform, Bicep, AWS CloudFormation, Python, PowerShell, Azure CLI, or AWS CLI;
• Knowledge of data security posture management, SaaS security posture management, cloud entitlement management, zero trust architecture, and cloud threat modelling;
• Experience supporting cloud security audits, control testing, regulatory compliance, and risk remediation programs.

About us

At ICBC, it’s our job to make sure the car insurance system works for everyone in British Columbia, today and in the future. If you want to make the most of your skills and expertise while growing your career, we want you. A career at ICBC is an opportunity to be part of a talented, diverse and inclusive team that is driven to serve its customers and community. You can expect a competitive salary, comprehensive benefits and a collaborative work environment. If you are reliable and dependable, apply today to be part of our talented and diverse team as we work together to create an insurance system we can all be proud of.

• Hybrid 8– you will work a minimum of 2 days per week at your primary in-office headquarters, subject to operational requirements. The remaining days will be remote within British Columbia.

ICBC provides comprehensive benefit coverage to all eligible permanent full time bargaining unit employees including a defined benefit pension plan and 3 weeks’ vacation, plus up to 16 days of time off.

• Extended Health and dental coverage (no premiums)
• Employee and Family assistance program (wellness support)
• Basic group life insurance
• Voluntary group life insurance
• Critical Illness insurance
• Sick leave plan – 100% of pay for a period of a maximum of 150 hours
• Long term disability plan
• Pension plan – defined benefit pension plan that pays a benefit to you or your beneficiary upon termination, death, or retirement.
• Benefits for part-time employees may be pro-rated, with benefit costs shared between ICBC and the employee.

BU benefits are determined by the collective agreement and may change from time to time based on collective bargaining negotiations.

Only candidates legally entitled to work in Canada will be considered for this position.