Cyber Engineer

What we offer

In addition to a competitive salary and a rewarding career where you can truly make a difference, we offer a comprehensive package that meets the various needs of our diverse employees, including:

• Ability to participate in inclusive employee‑led networks to educate, inspire, amplify voices, build relationships and provide development opportunities;
• Minimum three (3) weeks of paid annual vacation days, increasing with years of service;
• Four (4) paid personal days;
• Defined benefit pension plan with OMERS, includes 100‑percent employer matching;
• Health, dental, and vision benefits, including a health spending account available upon your start date;
• Employee and family assistance program;
• Maternity and parental leave top up (93% of base salary);
• Training and development programs including tuition reimbursement of $1500 per calendar year;
• Fitness membership discount;

This job offers the opportunity to work from home as part of a hybrid work arrangement. This arrangement will allow you to work some days at a TCHC work location and the rest of the time from home. The amount of time required to work at a TCHC work location is flexible, while considering operational and service delivery requirements.

Reporting to the Senior Manager, Cyber Defense & Operations, the Cyber Engineer serves as the primary technical bridge between the Cybersecurity, Architecture and Infrastructure functions within the Information and Technology Services (ITS) division. This role exists to ensure that security controls are not only designed and prescribed, but operationally implemented, validated, and sustained across the organization’s infrastructure landscape.

The Cyber Engineer operates as the technical hands of the cybersecurity program – translating security architecture decisions and threat intelligence into concrete, measurable configurations across network, endpoint, cloud, and on‑premises environments. The incumbent supports daily cyber operations including threat monitoring, vulnerability remediation, and incident response execution, while also driving the technical integration of security tooling within the broader IT infrastructure.

• Work closely with the security architect to design, implement, and validate security controls across network, endpoint, server, cloud (Azure), and hybrid infrastructure environments.
• Configure and maintain enterprise security tools including but not limited to Crowd Strike, Tenable, Microsoft Sentinel, Microsoft Defender, MS Purview and Splunk.
• Assist in implementing security hardening standards and benchmarks (CIS, NIST) across infrastructure components, including firewalls, switches, servers, and cloud workloads.
• Perform technical integration of new security solutions into the existing infrastructure stack, coordinating with network and systems teams.
• Provide technical guidance and implementation support to infrastructure and cyber operations teams on security requirements and standards.
• Act as the primary technical liaison between the cybersecurity function and infrastructure delivery, translating security requirements into actionable engineering tasks.
• Develop and maintain security automation scripts and workflows (Power Shell, Python) to streamline threat detection, vulnerability remediation, and security control enforcement across enterprise infrastructure.
• Design and implement automated response playbooks within SOAR and SIEM platforms to reduce manual intervention and accelerate incident response timelines.
• Engineer and maintain identity and access management controls within Microsoft Entra  (Azure AD), including conditional access policies, Privileged Access Management (PAM), and multi‑factor authentication (MFA) configurations aligned to zero‑trust principles.
• Conduct periodic access reviews and privilege audits to ensure adherence to least‑privilege and role‑based access control standards across cloud and on‑premises environments.
• Configure and maintain cloud security posture management (CSPM) tooling, including Microsoft Defender for Cloud, to monitor, assess, and remediate security misconfigurations across Azure…