Azure Cloud Security Engineer

Azure Cloud Security Engineer

Location – Toronto, Canada

Work Model – Hybrid ( 2 – 4 days to office)

JD:

Seeking a Cloud Security Engineer with strong expertise in Azure cloud technologies to support the security, compliance, and operational stability of cloud environments. The role involves remediating vulnerabilities, resolving compliance gaps, implementing security enhancements, and maintaining secure cloud infrastructure across platform services and components. Key responsibilities include patching container images, addressing security findings, investigating policy violations, and applying remediation through infrastructure-as-code (IaC), configuration updates, and cloud service optimizations. The ideal candidate should have hands-on experience with Azure services, cloud security best practices, and infrastructure automation.

In this role, you will help secure and maintain our cloud infrastructure by remediating vulnerabilities, resolving compliance issues, and implementing security improvements across cloud services and platform components. Day-to-day responsibilities include patching container images, addressing security findings, investigating policy violations, and applying fixes through infrastructure-as-code and configuration updates.

Our core technology stack includes Kubernetes, App Service Premium, Docker, Terraform, and GitHub Actions.

Most of the infrastructure runs on Microsoft Azure.

Must-Have Qualifications

• Experience troubleshooting Docker container image issues and implementing remediation plans for security vulnerabilities, including determining when vendor patches, exceptions, or compensating controls are required.

•           Experience with VM security patching, including reviewing vulnerability reports, prioritizing findings, and executing remediation plans.

• Ability to investigate and remediate cloud policy violations, such as missing encryption, tagging, configuration, or governance controls.

•           Strong hands-on coding and configuration experience, including updating Terraform modules, YAML files, and CI/CD workflows in an infrastructure-as-code environment.

• Working knowledge of Microsoft Entra ID concepts, including identity, access, and permissions management.

• Familiarity with Microsoft Azure cloud services and cloud security practices.