Specialist Cloud Security

Posting

Start Date:

11/10/26

Join CPKC, North America’s first transnational railroad connecting U.S., Canada, and Mexico, where your career drives progress and safety is paramount. We connect communities, fuel economic growth, and provide meaningful work in a culture that values diversity, accountability, and pride. With opportunities for training, development, and advancement, you’re not just building a career—you’re part of something bigger. Together, we move goods, connect people, and create lasting change.

Your future starts here.

PURPOSE OF THE POSITION:
As a Cloud Security Engineer, you will play a key role in protecting and advancing our cloud platforms by implementing and enhancing security controls across AWS and Azure environments. You will collaborate closely with cloud engineers, architects, and business stakeholders to identify and remediate security risks, support the design of secure and scalable cloud solutions, and help drive security best practices throughout the organization.

This is an exciting opportunity to work with leading cloud technologies, security automation, and Infrastructure as Code (IaC) while making a direct impact on the security, reliability, and future growth of our enterprise cloud environment.

POSITION

ACCOUNTABILITIES :

Develop and maintain existing Infrastructure as Code (IaC) solutions to standardize, automate, version-control, and reliably provision security controls in our cloud environments

Implement security best practices, including identity and access management, encryption, network segmentation, secrets management, logging, threat detection, and incident response controls

Partner with Enterprise Security, Enterprise Architecture, and product teams to ensure cloud environments are secured

Design, implement, and maintain secure cloud infrastructure solutions across AWS and Azure environments, ensuring scalability, reliability, and operational excellence

POSITION REQUIREMENTS:

Post-secondary degree or diploma in Information Technology, Cybersecurity, Computer Science, or a related field, or an equivalent combination of education and industry experience

6+ years of experience in cloud infrastructure, cloud engineering, cybersecurity, or related technical roles

4+ years of hands-on experience designing, deploying, and operating production workloads in AWS

Demonstrated experience with AWS monitoring, governance, and security services, including Amazon Cloud Watch, Cloud Trail, AWS Config, Guard Duty, AWS Organizations, AWS IAM, API Gateway, Event Bridge, SNS, and SQS

Proven experience implementing secure cloud networking, encryption, secrets management, and Infrastructure as Code (IaC) solutions using Amazon VPC, Security Groups, Route 53, Transit Gateway, Azure VNets, Azure Network Security Groups, AWS KMS, AWS Secrets Manager, Azure Key Vault, Terraform, and AWS Cloud Formation

Valid passport with the ability to travel within Canada and the United States without restrictions, as required by the role

WHAT CPKC HAS TO

OFFER:

Flexible and competitive benefits package

Competitive company pension and/or retirement plans

Employee share purchase plan

Performance incentive plan

Annual fitness subsidy

Part-time studies program

PRE-EMPLOYMENT REQUIREMENTS:
Background Investigation

Criminal history check

Education verification

Professional references

BECOMING A RAILROADER:
As an employee with a North American presence, the possibility does exist that the location of your position may be changed based on organizational requirements.

Management Conductor Program
Becoming a qualified conductor or locomotive engineer is the single best way for a management employee to learn the business  may be required to obtain a certification or to maintain your current certification/qualification…