Senior Cloud Security Engineer

We are seeking a highly accomplished Senior Cloud Security Engineer for an enterprise-level contract-to-permanent opportunity. In this role, you will take on a premier cloud security architecture, threat detection, and DevSecOps engineering capacity, specializing in designing, automating, and deploying production-grade security controls across multi-cloud and Azure-centric environments.

As a Senior Cloud Security Engineer, you will bridge the gap between cybersecurity governance, DevOps automation, platform engineering, and software development teams. Operating in a 100% remote setting, you will combine strategic security architecture with hands-on operational execution—leading Cloud Security Posture Management (CSPM), application security testing (SAST/DAST), RBAC governance, and security incident response. This position demands a technical authority with deep expertise in Microsoft Azure security services, Prisma Cloud, Microsoft Defender, and infrastructure-as-code automation who can embed robust guardrails into delivery pipelines and maintain rigorous compliance standards.

Location: Remote

Assignment Type: 100% Remote

Contract Duration: 6-month contract to start (with intentions to convert to Full-Time Permanent)

Advantages
100% Remote Flexibility: Enjoy complete work-from-home autonomy across all business operations.

Contract-to-Perm Pathway: Structured initial contract with clear intentions for permanent conversion.

Modern Security Tooling: Gain deep hands-on exposure to Prisma Cloud, Microsoft Defender for Cloud, and GitHub Advanced Security.

High-Impact Governance Scope: Lead enterprise-wide CSPM, zero-trust network segmentation, and DevSecOps pipeline automation.

Responsibilities
Design, implement, and continuously enhance cloud security architectures, baseline configurations, and technical controls across enterprise cloud environments.

Lead threat modeling, technical vulnerability assessments, and comprehensive security architecture reviews for cloud-native and hybrid infrastructure.

Own and administer Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWPP) using Prisma Cloud, configuring policies, triaging alerts, and driving remediation.

Deploy, tune, and manage Microsoft Defender for Cloud and the broader Microsoft Defender suite across subscriptions, investigating security alerts and leading incident response workflows.

Integrate static (SAST) and dynamic (DAST) application security testing tools into CI/CD pipelines, establishing severity thresholds and partnering with developers to remediate vulnerabilities prior to release.

Oversee enterprise RBAC governance, designing role models, conducting periodic access reviews, and enforcing least-privilege principles across cloud resources and application layers.

Collaborate with DevOps and Platform Engineering squads to embed automated security controls, secrets management, container image scanning, and policy-as-code into CI/CD pipelines and Terraform/Ansible workflows.

Ensure technical alignment with regulatory compliance frameworks such as SOC 2, HIPAA, ISO 27001, and PHIPA, mapping security controls and supporting audit readiness.

Provide escalation support for complex security incidents, participating in on-call response rotations and forensic triage.

Champion zero-trust architecture, secure-by-design patterns, and cloud security best practices across technical and cross-functional teams.

Author and maintain comprehensive security runbooks, post-incident reviews, threat modeling documentation, and knowledge-base repositories.

Maintain accurate reporting and tracking of project activities and operational hours within designated enterprise management systems.

Qualifications
Core Cloud Security & Technical Requirements
Cloud Security Experience: Minimum 7+ years of hands-on technical experience in cloud security, with significant expertise focused on Microsoft Azure security services (Microsoft Entra ID, Azure Policy, Key Vault, NSGs, Private Endpoints, and Azure Security Center).

CSPM & Defender Tooling: Proven production experience administering Prisma Cloud (policy configuration, alert triage, remediation) alongside hands-on management of Microsoft Defender for Cloud.

DevSecOps & Application Security: Practical experience implementing and operating SAST and DAST tooling (e.g., SonarQube, GitHub Advanced Security, OWASP ZAP, Burp Suite, or Mend) within automated CI/CD pipelines.

Pipeline Security & Secrets: In-depth familiarity securing deployment pipelines in Azure DevOps or GitHub Actions, container image scanning, supply-chain security, and enterprise secrets management (Azure Key Vault, HashiCorp Vault).

RBAC & Governance: Strong experience building and enforcing RBAC models, access review workflows, and least-privilege security postures across multi-tier applications.

Infrastructure as Code & Containers: Solid experience writing and reviewing security-hardened infrastructure code using Terraform or Ansible, alongside container security knowledge for Kubernetes or OpenShift.

Cloud Networking & Architecture: Deep understanding of cloud networking fundamentals, including VNets, NSGs, Azure Firewall, Azure Private Link, and Zero Trust segmentation.

Preferred Certifications & Compliance Knowledge
Regulatory Compliance Frameworks: Demonstrated experience supporting compliance audits and mapping technical controls for frameworks such as SOC 2, HIPAA, ISO 27001, or PHIPA.

Certifications: Industry-recognized cloud and security certifications (e.g., AZ-500, MS-500, SC-200, CCSP, or CISSP) are considered a strong asset.

Soft Skills & Delivery Attributes
Analytical Problem Solving: Superior diagnostic capabilities to investigate security alerts, triage vulnerabilities, and perform root-cause analysis on complex incidents.

Communication & Collaboration: Excellent written and verbal communication skills with the ability to articulate complex security risks and technical guidance effectively to diverse stakeholders.

Summary
If you're interested in the "Senior Cloud Security Engineer" role based in Toronto, we encourage you to apply online at www.randstad.ca.
Only qualified candidates will be contacted for the next steps. We look forward to hearing from you!

Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.

Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to accessibility@randstad.ca to ensure their ability to fully participate in the interview process.