Summary
✨ AI‑Generated
A cloud security engineering role focused on protecting infrastructure, resolving vulnerabilities, improving compliance, and implementing secure configurations across cloud platforms.
Highlights
Opportunity to secure large-scale cloud environments, improve compliance, and work with modern infrastructure automation technologies.
Description
Position: Azure Cloud Infra Security Engineer
Location: Toronto – Hybrid
Skills
Azure cloud, Security, Remediating vulnerabilities
Job Description/ Responsibilities
In this role, you will help secure and maintain our cloud infrastructure by remediating vulnerabilities, resolving compliance issues, and implementing security improvements across cloud services and platform components.
Day-to-day responsibilities include patching container images, addressing security findings, investigating policy violations, and applying fixes through infrastructure-as-code and configuration updates.
Our core technology stack includes Kubernetes, App Service Premium, Docker, Terraform, and GitHub Actions.
Most of the infrastructure runs on Microsoft Azure.
Must-Have Qualifications
Experience troubleshooting Docker container image issues and implementing remediation plans for security vulnerabilities, including determining when vendor patches, exceptions, or compensating controls are required.Experience with VM security patching, including reviewing vulnerability reports, prioritizing findings, and executing remediation plans.Ability to investigate and remediate cloud policy violations, such as missing encryption, tagging, configuration, or governance controls.Strong hands-on coding and configuration experience, including updating Terraform modules, YAML files, and CI/CD workflows in an infrastructure-as-code environment.Working knowledge of Microsoft Entra ID concepts, including identity, access, and permissions management.Familiarity with Microsoft Azure cloud services and cloud security practices.
Nice-to-Have Qualifications
IAM and persona knowledge, with the ability to provide guidance on identity and access management initiatives.Experience or familiarity with API security concepts and best practices.Python experience, particularly for implementing security fixes while preserving existing application functionality.Java experience, particularly for implementing security fixes while preserving existing application functionality.
Regards
Patrick Fernandez
Talent Acquisition Group - Strategic Recruitment Manager