{"id":3733782,"url":"https://alion.io/job/icbc-senior-technical-specialist","title":"Senior Technical Specialist","company":{"id":1767742,"name":"ICBC","domain":"icbc.com","url":"https://alion.io/company/icbc-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Sales","role_family":"Sales","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Vancouver, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"OWASP","optional":false},{"name":"SIEM","optional":false},{"name":"Vault","optional":false},{"name":"Bicep","optional":true},{"name":"CloudFormation","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-10T02:38:38Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"We welcome applications from all qualified job seekers. Should you require any accommodations, including alternative interview formats, assistance with online assessments, or an ASL interpreter, throughout the application or hiring process, please email your request to  - we are committed to ensuring an accessible experience for all candidates.\nAt ICBC, we strive to build diverse teams which reflect the communities we serve. To support this, we’ve created two talent communities for Indigenous Peoples and People with Disabilities. By joining one of these communities, you’ll connect with our recruitment team who will guide you through the application process and help you explore opportunities at ICBC. Of course, you’re welcome to apply for jobs at ICBC whether or not you join a talent community.\nWe look forward to hearing from you!\nThe Information Services Division is currently looking for a Senior Technical Specialist. In this position, you will provide senior-level technical leadership for the design, implementation, governance, and operation of cloud security services and controls across Amazon Web Services (AWS), Microsoft Azure, and hybrid environments. You will serve as a cloud security subject matter expert, guide technical teams, and help advance the organization’s cloud security capabilities\nYour responsibilities will include:\nLeading, coordinating, and delivering cloud security projects and initiatives of varying complexity across AWS, Azure, and hybrid environments;\nDemonstrating an understanding of cloud security governance frameworks, standards, and benchmarks to support alignment of cloud security initiatives with organizational risk requirements and Enterprise Architecture guidance;\nProviding advanced-level technical consultation as the cloud security subject matter expert to IT Security, Cloud Security Platforms, Architecture, Infrastructure, Application Development, DevOps, and Project teams;\nAssist in the designing, assessing, and validating AWS and Azure security controls, including identity and access management, privileged access, network segmentation, encryption and key management, secrets management, logging and monitoring, workload protection, data protection, backup and recovery, and policy enforcement;\nAssist in establishing and maintaining secure cloud landing-zone requirements, account and subscription guardrails, policy-as-code controls, exception processes, and compliance reporting;\nLeading the technical evaluation, proof of concept, deployment, integration, tuning, and sustainment of Cloud-Native Application Protection Platform (CNAPP), Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), and related capabilities;\nLeading exposure management initiatives across cloud environments, including the identification, prioritization, validation, and remediation of security exposures, vulnerabilities, misconfigurations, and attack paths, and translating findings into practical operational actions and measurable risk reduction outcomes\nAssist in improving cloud application security throughout the system development life cycle by integrating security into CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), infrastructure-as-code scanning, container and image scanning, secrets detection, and supply-chain controls;\nLead the implementation of WAAP and other application security controls, including API discovery and inventory, authentication and authorization, schema validation, rate limiting, secrets and token protection, vulnerability testing, runtime monitoring, and protection against OWASP API Security Top 10 risks;\nTriaging complex cloud security alerts, vulnerabilities, misconfigurations, and incidents; determining risk and priority; coordinating containment and remediation; and providing clear technical direction to junior SOC analysts and operational teams;\nDeveloping cloud-focused security monitoring, detection, investigation, and response use cases using relevant AWS, Azure, CNAPP, SIEM, and SOAR telemetry;\nLeading or supporting cloud security incident response activities, including evidence preservation, root-cause analysis, recovery validation, lessons learned, and improvements to preventive and detective controls;\nDefining sustainment roadmaps and service improvements for cloud security platforms and controls, including operational processes, metrics, control ownership, capacity, integrations, licensing, and vendor support;\nAssist in clear technical designs, standards, procedures, risk assessments, decision records, executive summaries, and operational runbooks;\nActing as a liaison with technology teams, cloud security service providers, vendors, Procurement, Contracts, Legal, Privacy, Risk, Audit, and Finance as required.\nPosition Requirements\nThe ideal candidate should exhibit the following skills and experience:\nSignificant hands-on experience securing enterprise workloads and services in both AWS and Microsoft Azure, including native security controls and shared-responsibility considerations;\nDemonstrated knowledge of AWS security services such as AWS Organizations, Control Tower, IAM, IAM Identity Center, Security Hub, GuardDuty, Inspector, Macie, CloudTrail, Config, KMS, Secrets Manager, WAF, Shield, Network Firewall, and Security Lake;\nDemonstrated knowledge of Azure security services such as Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure Policy, Defender for Cloud, Microsoft Sentinel, Key Vault, Azure Firewall, Web Application Firewall, Private Link, Network Security Groups, and Azure Monitor;\nHands-on experience evaluating, deploying, integrating, or operating CNAPP and CSPM technologies, including posture management, workload protection, entitlement management, attack-path analysis, vulnerability management, and cloud asset inventory;\nStrong application and DevSecOps security knowledge, with practical experience integrating security scanning and quality gates into CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, or Jenkins;\nPractical knowledge of container, Kubernetes, serverless, infrastructure-as-code, software supply-chain, and secrets-management security;\nExperience assessing and securing APIs and API gateways, including OAuth 2.0, OpenID Connect, JSON Web Tokens, service identities, authorization models, input validation, abuse prevention, and runtime monitoring;\nAdvanced analytical and troubleshooting skills, with experience triaging cloud security alerts and incidents across identity, network, application, workload, and data layers;\nExperience in cybersecurity incident response, including investigation, containment, eradication, recovery, stakeholder coordination, and post-incident improvement;\nAbility to mentor and provide technical guidance to junior SOC analysts, including investigation methodology, escalation criteria, evidence quality, and clear documentation;\nWorking knowledge of SIEM/SOAR platforms and cloud security telemetry, preferably Microsoft Sentinel and relevant AWS and Azure logging sources;\nExperience translating technical cloud security risks into practical remediation plans and communicating effectively with technical teams, management, risk owners, auditors, and vendors;\nAbility to manage multiple priorities, lead technical initiatives, and work collaboratively across security, infrastructure, cloud security platform, architecture, and application delivery teams;\nProven written and verbal communication skills, including the ability to produce standards, architecture guidance, operational runbooks, risk summaries, and executive-ready recommendations.\nEducation and Professional Certifications\nA diploma or degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or an equivalent combination of education and relevant experience;\nCloud security certification is preferred; certifications include Certified Cloud Security Professional (CCSP), AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Cybersecurity Architect Expert;\nAdditional relevant certifications such as CISSP, GIAC Cloud Security Automation (GCSA), GIAC Public Cloud Security (GPCS), GIAC Cloud Incident Response (GCIR), or Kubernetes security certifications are considered assets.\nPreferred Experience\nExperience in a large, complex, regulated enterprise with hybrid and multi-cloud environments;\nExperience with implementing and maintaining modern CNAPP and CSPM platforms.\nExperience with security automation using Terraform, Bicep, AWS CloudFormation, Python, PowerShell, Azure CLI, or AWS CLI;\nKnowledge of data security posture management, SaaS security posture management, cloud entitlement management, zero trust architecture, and cloud threat modelling;\nExperience supporting cloud security audits, control testing, regulatory compliance, and risk remediation programs.\nAbout us\nAt ICBC, it’s our job to make sure the car insurance system works for everyone in British Columbia, today and in the future. If you want to make the most of your skills and expertise while growing your career, we want you. A career at ICBC is an opportunity to be part of a talented, diverse and inclusive team that is driven to serve its customers and community. You can expect a competitive salary, comprehensive benefits and a collaborative work environment. If you are reliable and dependable, apply today to be part of our talented and diverse team as we work together to create an insurance system we can all be proud of.\nWork arrangements defined\nHybrid 8 - you will work a minimum of 2 days per week at your primary in-office headquarters, subject to operational requirements. The remaining days will be remote within British Columbia. \nICBC Head Office Relocation\nThis role is currently based at our Head Office in North Vancouver and will move to our new Head Office in the VCC-Clark area in Spring/Summer 2027 - ICBC headquarters to relocate to new Vancouver office building | Daily Hive.\nBenefits\nICBC provides comprehensive benefit coverage to all eligible permanent full time bargaining unit employees including a defined benefit pension plan and 3 weeks’ vacation, plus up to 16 days of time off.\nExtended Health and dental coverage (no premiums)\nEmployee and Family assistance program (wellness support)\nBasic group life insurance\nVoluntary group life insurance\nCritical Illness insurance\nSick leave plan - 100% of pay for a period of a maximum of 150 hours\nLong term disability plan\nPension plan - defined benefit pension plan that pays a benefit to you or your beneficiary upon termination, death, or retirement.\nBenefits for part-time employees may be pro-rated, with benefit costs shared between ICBC and the employee.\nBU benefits are determined by the collective agreement and may change from time to time based on collective bargaining negotiations.\nOnly candidates legally entitled to work in Canada will be considered for this position.","description_format":"text","description_chars":11144,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Property & Casualty Insurance","Cloud Security"],"lifecycle":[{"event":"open","at":"2026-11-04T08:58:39Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.853,"p_room":0.9,"age_days":11,"expected_fill_days":29,"reasons":["conf:4","win:mid"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/icbc-senior-technical-specialist","json_url":"https://alion.io/job/icbc-senior-technical-specialist.json","meta":{"generated_at":"2026-11-10T11:22:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26389,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1767742},"rest":"https://alion.io/mcp/rest/get_company?id=1767742"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ficbc-senior-technical-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ficbc-senior-technical-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ficbc-senior-technical-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/icbc-senior-technical-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ficbc-senior-technical-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3733782}},{"tool":"search_jobs","arguments":{"company":"icbc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3733782},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}