Responsibilities

Design and implement AWS security architectures aligned with compliance requirements and industry best practices.

Assess cloud security risks, enforce policies, support audits, and manage AWS IAM, Organizations, and Control Tower.

Deploy and manage AWS-native security services including Security Hub, GuardDuty, Macie, Inspector, WAF, and Shield.

Configure encryption and key-management solutions using AWS KMS, CloudHSM, ACM, and Secrets Manager.

Integrate AWS logging and monitoring with SIEM platforms for threat detection.

Secure AWS networks using VPCs, Security Groups, ACLs, and PrivateLink.

Embed security into DevOps and CI/CD workflows and automate controls with Terraform, CloudFormation, Python, Bash, and PowerShell.

Apply security practices to AWS EKS, ECS, Fargate, Kubernetes, container, and serverless environments.

Conduct vulnerability assessments, penetration testing, remediation, incident-response exercises, and disaster-recovery planning.

Drive compliance with CIS AWS Benchmarks, NIST, ISO 27001, SOC 2, PCI-DSS, and HIPAA.

Train internal teams on cloud security risks, controls, and emerging practices.

Requirements

- 10+ years of IT/security experience, including 4+ years focused on AWS cloud security.
- Hands-on experience securing AWS IAM, VPC, EC2, S3, RDS, Lambda, EKS, ECS, Fargate, CloudFront, and Route 53.
- Strong knowledge of AWS-native security services including GuardDuty, Security Hub, Macie, Inspector, WAF,



Shield, CloudTrail, and CloudWatch.
- Experience with encryption and key management using AWS KMS, CloudHSM, and ACM.
- Experience with infrastructure as code and automation using Terraform, CloudFormation, Python, Bash, and PowerShell.
- Experience securing containers, Kubernetes, and serverless workloads.
- Knowledge of Zero Trust, identity federation, and role-based access control in AWS environments.
- Experience with vulnerability scanning, penetration testing, audit readiness, SIEM/SOAR, incident response, and forensic analysis.
- Experience with Azure and GCP is preferred.
- A proven track record leading cloud security initiatives in regulated industries.
- A bachelor’s degree in Computer Science, Cybersecurity, or a related field is preferred.
- Professional certifications such as CISSP, AWS Security Specialty, or equivalent are strongly preferred.

Perks

Hybrid work environment balancing remote work and in-office work at the corporate head office.

Health and dental plans with 100% of premiums covered, plus an Employee Assistance Program.

Retirement savings options.

Discretionary annual bonus based on individual performance and company success.

Tuition assistance, professional-development reimbursement, Perkopolis discounts, and rewards and recognition programs.

Collaborative corporate-office environment with breakout rooms and snacks.

📌 Cloud Security Engineer (Remote) (Toronto)
🏢 Momentum Financial Services Group
📍 Toronto