87610# Cloud Computing Specialist (Cybersecurity Advisor)MontrealHybridCybersecurity and Identity ManagementApplyWith over 30 years of recognized expertise, COFOMO is now a leading Canadian consulting firm specializing in digital and artificial intelligence. Supported by more than 3,000 experts, 10 Centers of Excellence, and 4 offices across the country, we are uniquely positioned to successfully guide our clients through their transformations. Both strategic and tactical, we help organizations across a wide range of industries thrive in today’s rapidly evolving world.## Our promiseHelp our clients succeed and maximize the impact of their transformation initiatives, turning them into powerful drivers of growth and innovation.## Job descriptionHere's a brief overview of the tasks and responsibilities you'll have :
- Provide cloud security expertise during solution design, architecture reviews, project delivery, and technology change initiatives;
- Evaluate cloud architectures and services based on security requirements, approved models, and risk appetite;
- Recommend appropriate security controls for identity and access management, networking, data protection, encryption, key and secret management, logging, monitoring, backups, and resiliency;
- Support threat modeling and cloud risk assessments by translating identified risks into accurate and enforceable security controls;
- Document security recommendations and decisions, residual risks, exceptions, and required corrective actions;
- Promote security-by-design and least privilege principles for cloud solutions and services;
- Contribute to the implementation and continuous improvement of cloud security posture management and workload protection capabilities;




- Review cloudconfigurations, security findings, proofs of control, and deviations from approved baselines;
- Validate theeffectiveness of preventive, detective, and remedial controls and identify misconfigurations, excessive permissions, exposed services, and inadequate security settings;
- Work with setting owners to prioritize corrective actions based on risk exposure, operability, business impact, root causes, and compensating controls;
- Develop and maintain relevant metrics on cloud security posture, control coverage, exceptions, and remediation progress;
- Assess identity and access management controls, including privileged access, service and workload identities, role assignments, and segregation of duties;
- Advise teamson secure authentication, authorization, conditional access, federation and privileged access management mechanisms;
- Support requirements for data classification and protection, encryption, key and certificate lifecycle, protection of secrets, and secure data retention and transfer;
- Review network segmentation, connectivity, inbound and outbound flow controls, resource exposure to unauthorized external networks, and secure administrative access mechanisms;
- Guide teams on securing virtual machines, managed services, databases, storage, serverless services, containers, Kubernetes,



and integration platforms;
- Integrate security requirements into Infrastructure as Code (IaC) practices and continuous integration and continuous deployment (CI/CD) pipelines, in collaboration with relevant teams;
- Automate thevalidation of configurations, policies, and secrets to detect security deviations before deployment;
- Contribute to the implementation of repeatable safeguards, Policy as Code controls, secure templates, and security controls built into deployment processes;
- Analyze findings from infrastructure and vulnerability analysis tools, cloud security services, and code security tools;
- Reduce reliance on manual controls and configuration creep through automated, repeatable security practices;
- Verify security controls for containerized and Kubernetes workloads, including node access, identities, group and namespace isolation, network policies, image integrity, secrets, admission controls, and runtime protection;
- Define and maintain secure baselines for containers, registries, platforms, and cloud workloads;
- Lead vulnerability management and remediation of managed platform workloads, images, hosts, and components;
- Define cloudsecurity logging, alerting, monitoring, and telemetry requirements;
- Improve detection coverage and operational efficiency of security alerts in collaboration with relevant stakeholders;
- Participate in vulnerability assessments, investigations, and incidents by validating findings, assessing their severity, analyzing root causes, and recommending corrective controls;
- Integrate lessons learned from findings and incidents into standards, baselines,

📌 Cloud Computing Specialist (Winnipeg)
🏢 COFOMO
📍 Winnipeg