{"id":3557469,"url":"https://alion.io/job/randstad-canada-senior-cloud-security-engineer","title":"Senior Cloud Security Engineer","company":{"id":19351,"name":"Randstad Canada","domain":"randstad.ca","url":"https://alion.io/company/randstad","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":142000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Mend","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OpenShift","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-30T18:40:34Z","employer_posted_date":null,"last_verified_at":"2026-10-30T18:40:34Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"We are seeking a highly accomplished Senior Cloud Security Engineer for an enterprise-level contract-to-permanent opportunity. In this role, you will take on a premier cloud security architecture, threat detection, and DevSecOps engineering capacity, specializing in designing, automating, and deploying production-grade security controls across multi-cloud and Azure-centric environments.\n\nAs a Senior Cloud Security Engineer, you will bridge the gap between cybersecurity governance, DevOps automation, platform engineering, and software development teams. Operating in a 100% remote setting, you will combine strategic security architecture with hands-on operational execution—leading Cloud Security Posture Management (CSPM), application security testing (SAST/DAST), RBAC governance, and security incident response. This position demands a technical authority with deep expertise in Microsoft Azure security services, Prisma Cloud, Microsoft Defender, and infrastructure-as-code automation who can embed robust guardrails into delivery pipelines and maintain rigorous compliance standards.\n\nLocation: Remote\n\nAssignment Type: 100% Remote\n\nContract Duration: 6-month contract to start (with intentions to convert to Full-Time Permanent)\n\nAdvantages\n100% Remote Flexibility: Enjoy complete work-from-home autonomy across all business operations.\n\nContract-to-Perm Pathway: Structured initial contract with clear intentions for permanent conversion.\n\nModern Security Tooling: Gain deep hands-on exposure to Prisma Cloud, Microsoft Defender for Cloud, and GitHub Advanced Security.\n\nHigh-Impact Governance Scope: Lead enterprise-wide CSPM, zero-trust network segmentation, and DevSecOps pipeline automation.\n\nResponsibilities\nDesign, implement, and continuously enhance cloud security architectures, baseline configurations, and technical controls across enterprise cloud environments.\n\nLead threat modeling, technical vulnerability assessments, and comprehensive security architecture reviews for cloud-native and hybrid infrastructure.\n\nOwn and administer Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWPP) using Prisma Cloud, configuring policies, triaging alerts, and driving remediation.\n\nDeploy, tune, and manage Microsoft Defender for Cloud and the broader Microsoft Defender suite across subscriptions, investigating security alerts and leading incident response workflows.\n\nIntegrate static (SAST) and dynamic (DAST) application security testing tools into CI/CD pipelines, establishing severity thresholds and partnering with developers to remediate vulnerabilities prior to release.\n\nOversee enterprise RBAC governance, designing role models, conducting periodic access reviews, and enforcing least-privilege principles across cloud resources and application layers.\n\nCollaborate with DevOps and Platform Engineering squads to embed automated security controls, secrets management, container image scanning, and policy-as-code into CI/CD pipelines and Terraform/Ansible workflows.\n\nEnsure technical alignment with regulatory compliance frameworks such as SOC 2, HIPAA, ISO 27001, and PHIPA, mapping security controls and supporting audit readiness.\n\nProvide escalation support for complex security incidents, participating in on-call response rotations and forensic triage.\n\nChampion zero-trust architecture, secure-by-design patterns, and cloud security best practices across technical and cross-functional teams.\n\nAuthor and maintain comprehensive security runbooks, post-incident reviews, threat modeling documentation, and knowledge-base repositories.\n\nMaintain accurate reporting and tracking of project activities and operational hours within designated enterprise management systems.\n\nQualifications\nCore Cloud Security & Technical Requirements\nCloud Security Experience: Minimum 7+ years of hands-on technical experience in cloud security, with significant expertise focused on Microsoft Azure security services (Microsoft Entra ID, Azure Policy, Key Vault, NSGs, Private Endpoints, and Azure Security Center).\n\nCSPM & Defender Tooling: Proven production experience administering Prisma Cloud (policy configuration, alert triage, remediation) alongside hands-on management of Microsoft Defender for Cloud.\n\nDevSecOps & Application Security: Practical experience implementing and operating SAST and DAST tooling (e.g., SonarQube, GitHub Advanced Security, OWASP ZAP, Burp Suite, or Mend) within automated CI/CD pipelines.\n\nPipeline Security & Secrets: In-depth familiarity securing deployment pipelines in Azure DevOps or GitHub Actions, container image scanning, supply-chain security, and enterprise secrets management (Azure Key Vault, HashiCorp Vault).\n\nRBAC & Governance: Strong experience building and enforcing RBAC models, access review workflows, and least-privilege security postures across multi-tier applications.\n\nInfrastructure as Code & Containers: Solid experience writing and reviewing security-hardened infrastructure code using Terraform or Ansible, alongside container security knowledge for Kubernetes or OpenShift.\n\nCloud Networking & Architecture: Deep understanding of cloud networking fundamentals, including VNets, NSGs, Azure Firewall, Azure Private Link, and Zero Trust segmentation.\n\nPreferred Certifications & Compliance Knowledge\nRegulatory Compliance Frameworks: Demonstrated experience supporting compliance audits and mapping technical controls for frameworks such as SOC 2, HIPAA, ISO 27001, or PHIPA.\n\nCertifications: Industry-recognized cloud and security certifications (e.g., AZ-500, MS-500, SC-200, CCSP, or CISSP) are considered a strong asset.\n\nSoft Skills & Delivery Attributes\nAnalytical Problem Solving: Superior diagnostic capabilities to investigate security alerts, triage vulnerabilities, and perform root-cause analysis on complex incidents.\n\nCommunication & Collaboration: Excellent written and verbal communication skills with the ability to articulate complex security risks and technical guidance effectively to diverse stakeholders.\n\nSummary\nIf you're interested in the \"Senior Cloud Security Engineer\" role based in Toronto, we encourage you to apply online at www.randstad.ca.\nOnly qualified candidates will be contacted for the next steps. We look forward to hearing from you!\n\nRandstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.\n\nRandstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to  to ensure their ability to fully participate in the interview process.\n\nThis posting is for existing and upcoming vacancies.","description_format":"text","description_chars":7727,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security"],"lifecycle":[{"event":"open","at":"2026-10-31T01:42:01Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":1,"expected_fill_days":22,"reasons":["seen:1","agency","velocity","win:early","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/randstad-canada-senior-cloud-security-engineer","json_url":"https://alion.io/job/randstad-canada-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-11-01T12:07:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18640,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19351},"rest":"https://alion.io/mcp/rest/get_company?id=19351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frandstad-canada-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frandstad-canada-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frandstad-canada-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/randstad-canada-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frandstad-canada-senior-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3557469}},{"tool":"search_jobs","arguments":{"company":"randstad.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3557469},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}