Cloud Security Engineer; AWS

Join to apply for the Cloud Security Engineer (AWS) role at Arcadia

This range is provided by Arcadia. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

CA$/yr - CA$/yr

Location: Toronto, ON (Hybrid – 3 days onsite, Tues–Thurs)

A leading fintech organization is building out its cloud security function and looking for an experienced Cloud Security Engineer to secure and scale its AWS environments. You’ll design and implement security controls, embed best practices into engineering workflows, and automate compliance across cloud infrastructure.

This is a highly visible, hands‑on role for someone who’s comfortable taking ownership — working across Dev Ops, engineering, and Info Sec to strengthen the company’s cloud posture while enabling speed and innovation.

• Design and implement secure, compliant AWS architectures across multi‑account environments
• Manage and harden AWS IAM, Organizations, and Control Tower using least‑privilege principles
• Deploy and manage AWS‑native security tooling — Guard Duty, Security Hub, Macie, Inspector, WAF, Shield
• Configure encryption and secrets management (KMS, Cloud
  
  HSM, ACM, Secrets Manager)
• Integrate AWS monitoring and logging (Cloud Trail, Cloud Watch, Config) with SIEM platforms for threat detection
• Embed security into CI/CD workflows, partnering with Dev Ops and platform engineering teams
• Automate controls using Terraform, Cloud Formation, and scripting (Python/Bash)
• Apply container security best practices across EKS, ECS, and Fargate
• Support vulnerability assessments, incident response, and audit readiness activities

• 8–10+ years in IT/security, with at least 4 years focused on AWS cloud environments
• Deep hands‑on knowledge of AWS services and native security tools
• Strong understanding of encryption, IAM, networking, and Zero Trust models
• Experience with IaC and automation (Terraform, Cloud Formation, Python, Bash)
• Familiarity with compliance frameworks such as CIS Benchmarks, ISO 27001, SOC2, and PCI‑DSS
• Excellent communicator who can bridge technical and business conversations
• Proactive, detail‑oriented, and passionate about building secure, scalable cloud systems

Mid‑Senior level

Full‑time

Financial Services and Software Development