Select how often (in days) to receive an alert: Hours of Work: 7.5 hours per day
- 5 day week (M-F) Work Arrangement: Hybrid 8 Salary Range: $98371.00
- $106561.00 Annually

Location:
North Vancouver, British Columbia, Canada We welcome applications from all qualified job seekers.
Should you require any accommodations, including alternative interview formats, assistance with online assessments, or an ASL interpreter, throughout the application or hiring process, please email your request to [email protected] – we are committed to ensuring an accessible experience for all candidates. At ICBC, we strive to build diverse teams which reflect the communities we serve. To support this, we’ve created two talent communities for Indigenous Peoples and People with Disabilities . By joining one of these communities, you’ll connect with our recruitment team who will guide you through the application process and help you explore opportunities at ICBC. Of course, you’re welcome to apply for jobs at ICBC whether or not you join a talent community. We look forward to hearing from you The Information Services Division is currently looking for a Senior Technical Specialist. In this position, you will provide senior-level technical leadership for the design, implementation, governance, and operation of cloud security services and controls across Amazon Web Services (AWS), Microsoft Azure, and hybrid environments. You will serve as a cloud security subject matter expert, guide technical teams, and help advance the organization’s cloud security capabilities Your responsibilities will include:
- Leading, coordinating, and delivering cloud security projects and initiatives of varying complexity across AWS, Azure, and hybrid environments;
- Demonstrating an understanding of cloud security governance frameworks,



standards, and benchmarks to support alignment of cloud security initiatives with organizational risk requirements and Enterprise Architecture guidance;
- Providing advanced-level technical consultation as the cloud security subject matter expert to IT Security, Cloud Security Platforms, Architecture, Infrastructure, Application Development, DevOps, and Project teams;
- Assist in the designing, assessing, and validating AWS and Azure security controls, including identity and access management, privileged access, network segmentation, encryption and key management, secrets management, logging and monitoring, workload protection, data protection, backup and recovery, and policy enforcement;
- Assist in establishing and maintaining secure cloud landing-zone requirements, account and subscription guardrails, policy-as-code controls, exception processes, and compliance reporting;
- Leading the technical evaluation, proof of concept, deployment, integration, tuning, and sustainment of Cloud-Native Application Protection Platform (CNAPP), Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), and related capabilities;
- Leading exposure management initiatives across cloud environments, including the identification, prioritization, validation, and remediation of security exposures, vulnerabilities, misconfigurations, and attack paths,



and translating findings into practical operational actions and measurable risk reduction outcomes
- Assist in improving cloud application security throughout the system development life cycle by integrating security into CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), infrastructure-as-code scanning, container and image scanning, secrets detection, and supply-chain controls;
- Lead the implementation of WAAP and other application security controls, including API discovery and inventory, authentication and authorization, schema validation, rate limiting, secrets and token protection, vulnerability testing, runtime monitoring, and protection against OWASP API Security Top 10 risks;
- Triaging complex cloud security alerts, vulnerabilities, misconfigurations, and incidents; determining risk and priority; coordinating containment and remediation; and providing clear technical direction to junior SOC analysts and operational teams;
- Developing cloud-focused security monitoring, detection, investigation, and response use cases using relevant AWS, Azure, CNAPP, SIEM, and SOAR telemetry;
- Leading or supporting cloud security incident response activities, including evidence preservation, root-cause analysis, recovery validation, lessons learned, and improvements to preventive and detective controls;
- Defining sustainment roadmaps and service improvements for cloud security platforms and controls, including operational processes, metrics, control ownership, capacity, integrations, licensing, and vendor support;
- Assist in explicit technical designs, standards, procedures, risk assessments, decision records, executive summaries, and operational runbooks;

📌 Senior Technical Specialist (North Vancouver)
🏢 ICBC
📍 North Vancouver