Cloud Security Engineer – Multi-Cloud (Azure/AWS/OCI)

Position: Cloud Security Engineer – Multi-Cloud (Azure/AWS/OCI)

Location: Onsite- Toronto, ON

Job type: Full-time/Permanent hiring

Seeking a Cloud Security Engineer to design and implement comprehensive cloud security architecture across Azure, AWS, and OCI environments. You'll configure and manage Microsoft Defender for Cloud, Sentinel SIEM, Azure Firewall, WAF policies, and AWS/OCI native security services while enforcing security baselines, CIS Benchmarks, and regulatory compliance controls. This role requires deep expertise in network security, EDR solutions, SIEM/SASE integration, threat modeling, and executive-level security reporting to support SOC operations and governance.

Key Responsibilities:

• Design and implement cloud security architecture across Azure, AWS, and OCI environments
• Configure and manage Microsoft Defender for Cloud, Defender for Endpoint (Plan 2), and Sentinel SIEM
• Implement and tune Azure Firewall, WAF policies (OWASP rules), and DDoS Protection
• Manage AWS security services: GuardDuty, Security Hub, Inspector, AWS Config, and Macie
• Configure OCI Cloud Guard, Security Zones, and VSS (Vulnerability Scanning Service)
• Enforce security baselines, CIS Benchmarks, and regulatory compliance controls (e.g., Ontario public sector)
• Implement EDR solutions and manage endpoint security posture across hybrid environments
• Design and review network security: NSGs, Security Groups, Security Lists, NVA traffic inspection
• Integrate SIEM/SASE solutions and support SOC operations with detection and response runbooks
• Conduct security risk assessments, threat modelling, and architecture reviews
• Prepare governance documentation, security artefacts, and executive-level security reporting

Required Skills:

Tools/Frameworks: Defender for Cloud, Sentinel, Defender for Endpoint, Azure Firewall/WAF/DDoS, GuardDuty, Security Hub, Inspector, Config, Macie, OCI Cloud Guard/VSS, EDR (CrowdStrike, Carbon Black, Defender), SIEM (Splunk, QRadar, Sumo), SASE (Zscaler, Prisma, Netskope), KQL, Playbooks, Analytics rules, Workbooks

Database/Cloud: Azure (Landing Zones, Policy, Key Vault, Entra ID, Purview, Network Watcher), AWS (IAM, VPC, S3, KMS, CloudTrail), OCI (IAM, Networking, Object Storage, Key Management), Hybrid/Multi-cloud, IAM/RBAC/PIM, Zero Trust, Encryption, Secrets management

Nice-to-Have: SASE (Zscaler, Prisma, Netskope), SC-200, AZ-500, AWS Security Specialty, OCI Security Professional, NIST, ISO 27001, SOC 2, Ontario public sector, DevSecOps, IaC security, Container security (Kubernetes, Docker), SOAR, Threat hunting, Purple team, Python, PowerShell, Terraform, Sentinel Data Lake, Graph Security API