Cyber Security Consultant

Overview

Our client is seeking a Cybersecurity Consultant for a 12-month contract based in Calgary, requiring full-time onsite presence. This role will focus on delivering cybersecurity enhancements across both cloud and traditional enterprise infrastructure environments, with a strong emphasis on remediating legacy technology risks, improving security configurations, and implementing sustainable security controls.

The successful candidate will combine hands-on technical cybersecurity expertise with project delivery experience, leading remediation initiatives across Microsoft on-premises environments, Microsoft 365, VMware infrastructure, and AWS cloud services. Working closely with infrastructure, endpoint, and security teams, the consultant will drive security improvements, coordinate remediation efforts, and implement lasting controls that strengthen the organization's overall cybersecurity posture.

Key Responsibilities

• Lead and execute cybersecurity improvement initiatives across enterprise infrastructure, including servers, endpoints, cloud platforms, and supporting technologies.
• Translate security assessments, penetration test findings, vulnerability reports, audit recommendations, and risk assessments into actionable remediation plans.
• Develop and manage project plans, implementation roadmaps, timelines, milestones, and deployment strategies for security initiatives.
• Coordinate remediation activities across Infrastructure, Endpoint Management, Security Operations, and other technical teams.
• Monitor and report on project progress, risks, dependencies, and overall remediation status.
• Implement and improve secure configuration baselines and hardening standards across Microsoft and cloud environments.
• Identify and remediate configuration drift, security gaps, and infrastructure misconfigurations.
• Support initiatives related to Privileged Access Management (PAM), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA).
• Lead remediation efforts for legacy infrastructure components that pose operational or cybersecurity risks.
• Collaborate with stakeholders to ensure security improvements align with business objectives and operational requirements.
• Document technical solutions, implementation procedures, and operational support requirements.
• Assist in the development of sustainable security practices, standards, and governance processes.

Required Qualifications

• 7+ years of experience in cybersecurity, infrastructure security, or security engineering roles.
• Demonstrated experience delivering cybersecurity remediation and infrastructure security improvement projects.
• Strong hands-on experience with Microsoft enterprise environments - Windows Server, Active Directory, Group Policy, Microsoft 365, Azure AD / Entra ID
• Experience securing and supporting VMware-based infrastructure environments.
• Strong knowledge of AWS cloud security controls, architecture, and best practices.
• Experience implementing system hardening, secure configuration baselines, and vulnerability remediation programs.
• Experience addressing findings from security assessments, penetration testing engagements, and audits.
• Understanding of security frameworks and best practices such as CIS Benchmarks, NIST, and Zero Trust principles.
• Strong project coordination and stakeholder management skills.
• Excellent communication and documentation abilities.

Nice-to-Have Experience

• Legacy infrastructure modernization and risk reduction initiatives.
• Large-scale security remediation programs.
• Regulated or enterprise-scale environments.
• Security governance, risk, and compliance (GRC) exposure.