Cloud Engineer jobs in United States

Momentum Financial Services is a leading provider of financial services in North America. For 40 years, we've been committed to providing financial solutions that meet the evolving needs of consumers and business owners. Through our retail network of over 400 locations, known as Moneymart, Insta Cheques and the Cheque Cashing store, we provide access to cash and related products to help our customers achieve their goals.

Our highly skilled workforce puts customers first in everything we do. We serve 2 million people annually with diverse and innovative financial products such as loans, cheque cashing, money transfer and prepaid cards. Through this ever-evolving suite of services, we empower customers to manage their finances and improve their lives. Wherever customers are on their financial journey, Momentum Financial Services Group provides solutions.

GENERAL FUNCTION

We are seeking a Cloud Security Engineer with deep expertise in AWS security to join our Information Security team. The ideal candidate will have a strong background in securing cloud environments, designing secure architectures, and implementing security best practices within AWS. This role is responsible for protecting our cloud infrastructure, ensuring compliance, and working closely with DevOps, Engineering, and Security teams to integrate security into cloud operations. The Cloud Security Engineer will be responsible for assessing, developing, and implementing security controls across AWS services, ensuring the security of applications, workloads, and infrastructure deployed in the cloud.

DUTIES/RESPONSIBILITIES

• Design and implement AWS security architectures that align with industry best practices and compliance requirements.
• Assess cloud security risks and enforce security policies across AWS environments.
• Manage and optimize AWS Identity and Access Management (IAM), AWS Organizations, and AWS Control Tower to enforce least privilege access controls.
• Implement and manage AWS security services, including AWS Security Hub, GuardDuty, Macie, Inspector, and WAF.
• Deploy and configure AWS-native encryption solutions, including AWS KMS, CloudHSM, and Secrets Manager for secure key and secret management.
• Integrate and manage AWS logging and monitoring tools, including CloudTrail, CloudWatch, Config, and SIEM integrations for threat detection.
• Ensure network security through secure configurations of AWS VPCs, Security Groups, Network ACLs, AWS Shield, and AWS PrivateLink.
• Work closely with DevOps teams to integrate security controls into CI/CD pipelines using AWS-native and third-party security tools.
• Automate security processes using Terraform, AWS CloudFormation, and Python/Bash scripting to enforce security best practices at scale.
• Implement container and Kubernetes security best practices using AWS EKS, ECS, Fargate, and container scanning solutions.
• Conduct security audits, vulnerability assessments, and penetration testing of cloud infrastructure.
• Ensure compliance with CIS AWS Benchmarks, NIST, ISO 27001, SOC2, PCI-DSS, HIPAA, and other regulatory frameworks.
• Develop and enforce incident response and disaster recovery plans for AWS environments.
• Educate and train internal teams on cloud security best practices and emerging threats.

EDUCATION

• Bachelor's degree in computer science, cybersecurity, or a related field is preferred
• CISSP certification is a plus

EXPERIENCE

• 10+ years of overall experience, with 4 years of experience in AWS security framework
• Hands-on experience securing AWS environments, including IAM, VPC, EC2, S3, RDS, Lambda, EKS, ECS, Fargate, CloudFront, and Route 53.
• Experience with AWS security services, including AWS Security Hub, GuardDuty, Macie, Inspector, WAF, Shield, CloudTrail, and CloudWatch.
• Strong understanding of network security concepts, including firewalls, VPNs, network segmentation, and DDoS mitigation in AWS.
• Knowledge of encryption, key management, and certificate management using AWS KMS, CloudHSM, and ACM.
• Experience implementing AWS-native security controls and automation using Terraform, CloudFormation, and scripting languages (Python, Bash, or PowerShell).
• Familiarity with container security best practices in AWS environments using EKS, ECS, and container scanning tools.
• Knowledge of Zero Trust security models, identity federation, and role-based access controls (RBAC) in AWS.
• Experience conducting cloud security audits, vulnerability assessments, and penetration testing.
• AWS Security Specialty Certification or other relevant AWS certifications (AWS Solutions Architect, AWS DevOps Engineer).
• Experience with multi-cloud security (Azure, Google Cloud) in addition to AWS.
• Hands-on experience with Infrastructure as Code (IaC) security tools, such as Checkov, tfsec, or Cloud Custodian.
• Experience with serverless security (AWS Lambda security best practices).
• Knowledge of SIEM solutions and security orchestration and automation (SOAR).
• Familiarity with SOC operations, incident response, and forensic analysis in cloud environments.
• Experience with cloud-native WAF solutions (AWS WAF, Cloudflare, Akamai).
• Strong understanding of compliance frameworks such as CIS AWS Benchmarks, NIST, ISO 27001, SOC2, PCI-DSS, and HIPAA.

SKILLS

• Strong problem-solving skills and the ability to work in a fast-paced environment.
• Excellent communication skills, with the ability to work cross-functionally with security, engineering, and DevOps teams.
• Knowledge of AI/ML security risks and governance in AWS.
• Go-Getter Attitude: Proactive and driven to identify and solve security challenges before they become issues.
• Security Champion: Passionate about cloud security and dedicated to spreading security awareness across development and engineering teams.
• Integrity & Ethics: Upholds the highest standards of security and compliance, advocating for security best practices while balancing business needs.
• Strong Communicator: Ability to explain complex security concepts to non-technical stakeholders and influence security decision-making.
• Collaborative Team Player: Works effectively with developers, DevOps, and security teams to integrate security seamlessly into cloud operations.
• Problem Solver: Analyzes security risks and implements effective solutions without slowing down innovation.
• Adaptability & Learning Mindset: Stays up to date with emerging cloud security threats, technologies, and best practices.

All your information will be kept confidential according to EEO guidelines.

*Notice to Ontario Applicants –Momentum Financial Services Groupis committed to accommodating applicants with disabilities up to the point of undue hardship during the recruitment, assessment, and selection process. If you are selected for an interview, please notifyMomentum Financial Services Group if you require accommodation in respect of the materials or procedures used at any time during this process. If you require accommodation,we will work with youto determine how to meet your needs.

Note to Internal Applicants: All internal applicants are required to notify current manager regarding interest in applying for this role.

*

indicates a required field

First Name *

Last Name *

Preferred First Name

Email *

Phone *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile

Website

Place of residence city *

Place of residence province/state * Select...

Are you legally authorized to work in Canada? * Select...

What are your salary expectations? *

Are you comfortable working on-site 2-3 times a week? * Select...

Are you 18 years of age or older? * Select...

Would you be open to relocation? * Select...

Where did you initially hear about the job? * Select...

If you chose 'Referral from Company Employee' or 'Other', please specify here:

I represent and warrant that all the information provided is true and correct and that I have not withheld any information which would affect Money Mart’s decision to offer me employment. I authorize Money Mart to verify the information provided. * Select...

Employment and Verification Information:

• Money Mart will review all submissions, and interview the most qualified candidates based on their knowledge, skills, abilities, and other competencies.
• Candidates who do not meet the requirements, in the recruitment process, for employment will remain classified as applicants and may re-apply for any future job posting and shall receive equal consideration.
• Only successful applicants will be contacted.
• All resumes will be kept on file for a period of three months.
• Money Mart is committed to protecting the rights of individuals to privacy with regard to the processing of personal data.
• It is necessary for Money Mart to process personal data in the normal and proper conduct of business operations.
• Such processing will be conducted fairly and lawfully in accordance with Canada’s Federal Personal Information Protection and Electronic Documents Act including the ten principles set out in the National Canadian Standards Association: Model Code for the Protection of Personal Information.
• If there is a query regarding the accuracy of your personal data then your query will be dealt with fairly and impartially.
• Money Mart holds data on prospective, current and former candidates, as well as prospective, current and former staff
• This data is held securely in electronic and/or as a paper record.
• The processing of this data is subject to the rules laid down under Canada’s Federal Personal Information Protection and Electronic Documents Act.
• Personal data will only be used for the proper purposes of the employment business.
• The protection of your personal data will be governed by the provisions of Canada’s Federal Personal Information Protection and Electronic Documents Act. Access to your data will be restricted to those personnel to whom it is necessary for proper purposes.

Please be informed that your application to this job offer will trigger some processing of your personal data by the recruiting company, the data controller. Greenhouse, the data processor, has no control over such personal data processing. For more information on these personal data processing, please refer to the recruiting company’s privacy policy. * Select...