Senior Cloud Security Engineer – Azure CSPM (Remote)

Smile Digital Health; United States; Remote; USD 130,000 - 140,000; Full time

Benefits offered by this job

Remote Work Environment

Flexible Time Away From Work Policy

Competitive Salary and Health Benefits

RRSP/TFSA/401K Employee Contribution

Life and Disability

Employee Assistance Program

FHIR Study Program and Skillsoft

Super HAPI Fun Club

Job summary

Smile Digital Health seeks a Senior Cloud Security Engineer to design, automate, and deploy production-grade security across Azure and multi-cloud environments. You will own CSPM, threat detection, SAST/DAST in CI/CD, RBAC governance, and incident response, partnering with DevOps and Platform Engineering to embed security into the software delivery lifecycle and meet healthcare-grade compliance.

Applicants should have 7+ years in cloud security, strong Azure focus, and hands-on experience with

Qualifications

• 7+ years of hands-on cloud security experience, with Azure focus.
• Proven production-level Prisma Cloud CSPM usage and remediation workflows.
• Hands-on experience with Microsoft Defender for Cloud and Defender suite.
• Experience implementing SAST and DAST in CI/CD pipelines.
• Strong RBAC design and least-privilege enforcement across Azure.
• IaC experience with Terraform and Ansible.
• Kubernetes/OpenShift container security knowledge.
• Networking fundamentals for cloud security (VNets, NSGs, Firewalls).
• Familiarity with healthcare compliance frameworks (SOC 2, HIPAA, ISO 27001, PHIPA).
• Professional cloud/security certifications preferred (AZ-500, MS-500, CCSP, CISSP).

Responsibilities

• Design, implement, and continuously improve cloud security architecture and controls across Azure-based environments.
• Lead threat modelling, vulnerability assessments, and security reviews for cloud infrastructure.
• Operate CSPM using Prisma Cloud; configure policies and drive remediation with engineering teams.
• Deploy and manage Microsoft Defender for Cloud across Azure subscriptions; triage alerts.
• Integrate SAST/DAST tooling into CI/CD pipelines and define severity thresholds.
• Oversee RBAC governance and periodic access reviews across Azure and apps.
• Collaborate with DevOps to embed security controls into IaC and pipelines (Terraform, Ansible).
• Act as SME for healthcare security frameworks and map controls for audits.
• Provide Level 3 escalation for security incidents and participate in on-call rotations.

Skills

Azure security architecture

Prisma Cloud CSPM

Microsoft Defender for Cloud

SAST/DAST in CI/CD

RBAC governance

Terraform/Ansible IaC

Kubernetes security

Zero Trust / network security

Cloud security incident response

Security compliance knowledge (SOC 2,/

Tools

Prisma Cloud

Microsoft Defender for Cloud

GitHub Actions

Azure DevOps

OWASP ZAP

Burp Suite

Terraform

Ansible

HashiCorp Vault

Kubernetes

Job description

Smile Digital Health seeks a Senior Cloud Security Engineer to design, automate, and deploy production-grade security across Azure and multi-cloud environments. You will own CSPM, threat detection, SAST/DAST in CI/CD, RBAC governance, and incident response, partnering with DevOps and Platform Engineering to embed security into the software delivery lifecycle and meet healthcare-grade compliance.

Applicants should have 7+ years in cloud security, strong Azure focus, and hands-on experience with