Find work in Canada.

326,821 jobs across our Canadian network. How we count

Jobs in Canada

Save this search

Added 1 month ago
Java Lead- With GenAI Tools
J&M Group
Toronto, ON
Full-time
…practices that improve delivery velocity, software quality, and developer…
Added 1 month ago
Director, Product Security Architect
Varicent
Toronto, ON
Full-time
We're looking for a highly technical and hands-on Director, Product Security Architect to help shape secure-by-design principles across our SaaS products, cloud platforms, and AI-enabled…
Added 27 days ago
Director, Data Engineering, International Banking, Toronto, Mexico, Colombia, Peru
Scotiabank
Toronto, ON
The Director, DataOps is a senior technology leadership role accountable for the operational excellence, reliability, security, scalability, and cost efficiency of the Azure Databricks…
Added 27 days ago
Security Advisor Specialist - Threat Modelling
Intact FC
Mississauga, ON · Ottawa, ON · Toronto, ON · Laval, QC · Montreal, QC · Quebec, QC · Saint-Hyacinthe, QC
Full-time
…decisions, facilitate threat-modeling workshops, and embed security into DevSecOps and project governance…
Added 1 month ago
DevOps and DataOps Specialist
Moment Factory
Montreal, QC
Full-time
CI/CD Integration: Creating CI/CD pipelines on GitLab CI and integrating security from the development stage.
Added 4 months ago
Directeur - CSIRT /Director - CSIRT
SITA Switzerland Sarl
Montreal, QC
Full-time
…operational execution of the organization's enterprise Computer Security Incident Response Team…
Added 27 days ago
Senior Release Engineer
Questrade Financial Group
Toronto, ON
…accelerate compilation and feedback loops, embed modern AI SDLC and DevSecOps tooling, and ensure safe, automated releases for active trading…
Added 28 days ago
Agile Program Delivery Manager
TMX Group
Montreal, QC
Full-time
…program. You will support multiple cross-functional DevOps/DevSecOps teams (Technical Ecosystems) and will serve as a leader and coach within the program's delivery…
Added 1 month ago
Cloud Security Engineer
Paymentus
Richmond Hill, ON
Full-time
5+ years of experience in cloud security, infrastructure security, platform security, DevSecOps, security engineering, cloud engineering, site reliability engineering, or a closely related…
Added 1 month ago
Software Engineering Developer, DevOps
General Dynamics Mission Systems–Canada
Ottawa, ON
$85,000 to $110,000 CAD / year
Full-time
…engineering technology - we’re shaping the future of defence and security. Our teams design and deliver advanced, mission-critical solutions that enhance national security, strengthen…
Added 28 days ago
Principal Engineer, AI
BMO
Toronto, ON · BMOPLACE
Full-time
Partner closely with AI Developer Experience, AI Security and AI SDLC, and the Senior AI Architect in your platform build and operations.
Added 28 days ago
Director, AI Platform Engineering
BMO
Toronto, ON · BMOPLACE
Full-time
…engineering credibility with the executive presence to partner across Security, Architecture, DevOps, and domain teams. You are energized by taking real engineering assets - an existing…
Added 28 days ago
Principal Engineer, AI Platform
BMO
Toronto, ON · BMOPLACE
Full-time
Partner closely with AI Developer Experience (so domains can consume what you build), AI Security and AI SDLC (embedded specializations), and the Senior AI Architect (architectural…
Added 28 days ago
Senior Artificial Intelligence Platform Engineer & Fabrics
BMO
Toronto, ON · BMOPLACE
Full-time
Partner day-to-day with AI Developer Experience, AI Security, and AI SDLC counterparts as needed to deliver your work.
Added 28 days ago
Senior Artificial Intelligence Platform Engineer, AI Platform & Fabrics
BMO
Toronto, ON · BMOPLACE
Full-time
Partner day-to-day with AI Developer Experience, AI Security, and AI SDLC counterparts as needed to deliver your work.
Added 1 month ago
SecOps Developer
TextNow, Inc.
Waterloo, ON
Experienced in SecOps & SRE: You have 5+ years of experience in Security Operations, Site Reliability Engineering, or DevSecOps, with a strong understanding of cloud security, system…
Added 2 months ago
Business Information Security Officer-VP
State Street
Toronto, ON
Full-time
The Vice President, Business Information Security Officer (BISO) provides cyber risk management oversight to lines of business and legal entities within State Street, sitting within the…
Added 1 month ago
DevSecOps Consultant
CGI
Halifax, NS
Full-time
As a DevSecOps Consultant, you will be responsible for designing, implementing, and maintaining our platform infrastructure. You will work closely with development, operations, and security…
Added 17 days ago
Director, Product Security Architect
Varicent
Toronto, ON
We're looking for a highly technical and hands-on Director, Product Security Architect to help shape secure-by-design principles across our SaaS products, cloud platforms, and AI-enabled…
Added 1 month ago
Senior Platform Engineering Specialist
CGI
Toronto, ON
Full-time
…modern technology platforms that improve software delivery, developer productivity, operational resilience, security, and business…
Added 1 month ago
Senior Full Stack Developer
CGI
Toronto, ON
Full-time
DevSecOps & Quality: Enforce static code analysis and security standards using SonarQube, security scanners, and continuous integration workflows.
Added 1 month ago
Senior Architect (Cloud & FinOps Strategy)
CGI
Toronto, ON
Full-time
Architect foundational cloud environments (Landing Zones) that balance developer agility with strict security, compliance, and financial controls.
Added 1 month ago
Senior Security Engineer
Forma.ai
Toronto, ON
$160,000 to $190,000 USD / year
Full-time
Six or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
Added 1 month ago
Senior Security Engineer
Forma.ai
Toronto, ON
Full-time
Six or more years of experience in security engineering, cloud security, application security, DevSecOps, or infrastructure engineering.
Added 1 month ago
Software Developer - Talent Community
Portfolio+
Whitchurch-Stouffville, ON
Full-time
Security & Compliance (DevSecOps) – X-Ray, SonarQube, Rapid7

Paymentus

Cloud Security Engineer

Richmond Hill, ON, Canada

Job type: Full-time
Posting language: English
Posted: Aug 18, 2026

Apply About employer

Applications open in a new tab.

Original job description

Summary/Objective

The Cloud Security Engineer is responsible for helping secure the cloud-native infrastructure, platforms, services, and deployment patterns that support the Paymentus SaaS platform. This role reports to the Manager of Security Engineering and works closely with Engineering, Cloud Infrastructure, DevOps, Platform Engineering, Product, Compliance, Security Operations, and Application Security teams.

This is a hands-on technical role focused on securing Paymentus infrastructure across public cloud, Kubernetes, containers, serverless technologies, CI/CD pipelines, infrastructure as code, cloud identity, network controls, secrets management, logging, monitoring, and cloud-native security tooling.

The successful candidate must have deep practical knowledge of cloud security across AWS, GCP, and Azure, with strong experience securing modern SaaS platforms, web applications, RESTful APIs, microservices, and distributed systems. The role requires the ability to assess cloud architecture, identify insecure patterns, build scalable security controls, automate cloud security checks, and partner directly with engineering teams to remediate risk without unnecessarily slowing delivery.

Education and Experience

Bachelor’s Degree in Engineering, Computer Science, Software Engineering, Information Security, or a related technical field, or equivalent practical experience.
5+ years of experience in cloud security, infrastructure security, platform security, DevSecOps, security engineering, cloud engineering, site reliability engineering, or a closely related technical role.
Hands-on experience securing workloads in one or more major public cloud platforms, with strong preference for practical experience across AWS, GCP, and Azure.
Strong understanding of cloud-native architecture, SaaS platforms, microservices, distributed systems, RESTful APIs, authentication, authorization, encryption, logging, monitoring, and service-to-service communication.
Deep knowledge of cloud identity and access management, including least privilege, role-based access, service accounts, workload identity, cross-account access, privileged access, federation, and access governance.
Hands-on experience with Kubernetes security, including RBAC, cluster hardening, admission control, network policies, pod security controls, secrets management, workload isolation, and runtime security.
Hands-on experience with container security, including image scanning, base image hardening, container registries, image signing or provenance, runtime controls, and containerized application deployment patterns.
Experience securing serverless technologies, including function permissions, event-driven architectures, secrets handling, logging, monitoring, and abuse-prevention patterns.
Experience with infrastructure as code and policy-as-code technologies such as Terraform, CloudFormation, or similar tools.
Experience securing CI/CD pipelines, source control systems, build systems, artifact repositories, container registries, deployment workflows, and release automation.
Experience with cloud security tools and practices such as CSPM, CNAPP, CWPP, CIEM, cloud vulnerability management, cloud asset inventory, cloud detection engineering, IaC scanning, container scanning, and secrets scanning.
Strong knowledge of cloud networking and perimeter controls, including segmentation, routing, firewall rules, private endpoints, load balancers, TLS, DNS, ingress/egress controls, API gateways, and exposure management.
Familiarity with CDN, WAF, bot mitigation, rate limiting, edge security, and origin protection using platforms such as Cloudflare and Fastly.
Familiarity with application servers, web servers, and reverse proxy technologies such as Tomcat, JBoss, nginx, or similar platforms.
Good understanding of modern application security guidelines, including OWASP Top 10, OWASP API Security Top 10, and OWASP Top 10 for Large Language Model Applications.
Ability to analyze cloud security findings, determine exploitability, identify root cause, and recommend practical remediation steps.
Ability to work independently, manage multiple priorities, and deliver high-quality results in a fast-paced engineering environment.
Strong written and verbal communication skills, including the ability to explain cloud security risks clearly to technical and non-technical stakeholders.
Strong collaboration skills and the ability to build trusted working relationships with engineering, product, DevOps, cloud infrastructure, compliance, and security teams.

Preferred Qualifications

Experience working in fintech, payments, banking, financial services, or another highly regulated SaaS environment.
Experience with payment processing environments, cardholder data environments, tokenization, payment APIs, transaction platforms, or fraud-related infrastructure.
Experience supporting PCI DSS, SOC 2, SOX technology controls, NIST CSF, ISO 27001, or similar security and compliance frameworks.
Experience securing multi-cloud environments across AWS, GCP, and Azure.
Experience with Kubernetes admission controllers, service mesh security, cloud workload identity, runtime detection, image signing, software bill of materials, and supply chain security.
Experience building cloud security guardrails, secure landing zones, reusable infrastructure modules, secure service templates, policy-as-code, or developer self-service security capabilities.
Experience with cloud-native logging and detection tools, including cloud audit logs, SIEM integrations, security data lakes, threat detection rules, and incident investigation workflows.
Experience with red team findings, penetration testing support, attack-path analysis, cloud incident response, or cloud threat hunting.
Relevant certifications such as AWS Security Specialty, Google Professional Cloud Security Engineer, Azure Security Engineer, CCSP, CISSP, CKS, CKAD, CKA, Kubernetes Security Specialist, or equivalent practical experience.

Work Environment

This job operates in a professional office and technology environment. This role routinely uses standard office and engineering equipment, including laptop computers, collaboration tools, cloud platforms, security platforms, source code repositories, ticketing systems, and communication systems. The role requires frequent collaboration with geographically distributed teams and may involve participation in security incident response, urgent vulnerability remediation, production risk reviews, and executive briefings.

Physical Demands

While performing the duties of this job, the employee is regularly required to talk, hear, type, read, and view computer screens for extended periods. Specific vision abilities required by this job include close vision and the ability to adjust focus. The employee may occasionally be required to stand, walk, reach with hands and arms, lift files or equipment, open filing cabinets, bend, or stand on a stool as necessary. The employee may occasionally be required to lift up to 25 lbs.

Position Type/Expected Hours of Work

This is a full-time position. Days and hours of work are generally Monday through Friday during normal business hours. Occasional evening, weekend, or on-call work may be required based on business needs, security incidents, critical vulnerabilities, production releases, audit deadlines, or customer commitments.

Travel

Minimal travel is expected. Occasional travel may be required for company meetings, team events, customer security discussions, conferences, audits, or vendor engagements.

Other Duties

This job description is not designed to cover or contain a comprehensive listing of all activities, duties, or responsibilities required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

EEO Statement

Paymentus is an equal opportunity employer. We enthusiastically accept our responsibility to make employment decisions without regard to race, religious creed, color, age, sex, sexual orientation, national origin, ancestry, citizenship status, religion, marital status, disability, military service or veteran status, genetic information, medical condition including medical characteristics, or any other classification protected by applicable federal, state, provincial, and local laws and ordinances. Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employment.

Reasonable Accommodation

Paymentus recognizes and supports its obligation to endeavor to accommodate job applicants and employees with known physical or mental disabilities who are able to perform the essential functions of the position, with or without reasonable accommodation. Paymentus will endeavor to provide reasonable accommodations to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so would impose an undue hardship on the Company or pose a direct threat of substantial harm to the employee or others.

An applicant or employee who believes he or she needs a reasonable accommodation of a disability should discuss the need for possible accommodation with the Human Resources Department, or his or her direct supervisor.

Apply About employer

More about this job

Responsibilities

The Cloud Security Engineer secures cloud-native infrastructure, platforms, and deployment patterns for the Paymentus SaaS platform. This involves building scalable security controls, automating checks, and partnering with engineering teams to remediate risks across multi-cloud environments.

Requirements

Requires a Bachelor's degree in a technical field and 5+ years of experience in cloud or infrastructure security. Candidates must have deep practical knowledge of AWS, GCP, Azure, Kubernetes, and modern DevSecOps practices.

Skills

Cloud Security
AWS
GCP
Azure
Kubernetes Security
Container Security
DevSecOps
Infrastructure as Code
CI/CD Pipeline Security
Identity and Access Management
Network Security
CSPM
CNAPP
Terraform
OWASP
Secrets Management

Visa sponsorship

Not detected in the job text

Keywords

AWS
GCP
Azure
Kubernetes
Containers
Serverless
Terraform
CloudFormation
CI/CD
CSPM
CNAPP
CWPP
CIEM
RBAC
WAF
Cloudflare
Fastly
OWASP
PCI DSS
SOC 2
SOX
NIST CSF
ISO 27001
CISSP
CCSP
CKS
CKA
Fintech
SaaS
Microservices

Report this job