Job Title: Cloud Security Engineer

Location: Toronto, ON Onsite

Job Type: Full-Time Permanent

Key Responsibilities

- Design and implement cloud security architecture across Azure, AWS, and OCI environments.
- Configure and manage Microsoft Defender for Cloud, Defender for Endpoint (Plan 2), and Sentinel SIEM.
- Implement and tune Azure Firewall, WAF policies (OWASP rules), and DDoS Protection.
- Manage AWS security services: GuardDuty, Security Hub, Inspector, AWS Config, and Macie.
- Configure OCI Cloud Guard, Security Zones, and VSS (Vulnerability Scanning Service).
- Enforce security baselines, CIS Benchmarks, and regulatory compliance controls (e.g., Ontario public sector).
- Implement EDR solutions and manage endpoint security posture across hybrid environments.
- Design and review network security: NSGs, Security Groups, Security Lists, NVA traffic inspection.
- Integrate SIEM/SASE solutions and support SOC operations with detection and response runbooks.
- Conduct security risk assessments, threat modelling, and architecture reviews.




- Prepare governance documentation, security artefacts, and executive-level security reporting.

Required Qualifications

- 6+ years of security engineering experience with 3+ years in cloud (Azure, AWS, or OCI).
- Hands-on experience with Microsoft Defender for Cloud, Sentinel, and Defender for Endpoint.
- Strong knowledge of cloud-native security services across at least two major cloud providers.
- Experience with SIEM platforms, threat detection, and incident response.
- Understanding of network security: firewalls, WAF, IDS/IPS, and zero trust principles.
- Familiarity with compliance frameworks: CIS, NIST, ISO 27001, SOC 2.
- Microsoft Certified: Security Operations Analyst (SC-200) or Azure Security Engineer (AZ-500) preferred.
- AWS Security Specialty or OCI Security Professional a robust asset.

Nice to Have

- Experience with SASE vendors (Zscaler, Palo Alto Prisma, Netskope).

📌 Cloud Security Engineer (Toronto)
🏢 Zodiac Solutions
📍 Toronto