Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Senior Cloud Security Engineer (Remote Ontario) role.
Rezi rewrites your resume against Smile Digital Health's job description. Free.

Tailor your resume to this Senior Cloud Security Engineer (Remote Ontario) role.
Rezi rewrites your resume against Smile Digital Health's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Security Engineer (Remote Ontario) posting at Smile Digital Health — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Security Engineer (Remote Ontario) posting at Smile Digital Health — free, in seconds.
About the Role
The Senior Cloud Security Engineer is responsible for designing, automating, and deploying production-grade services on behalf of customers to various clouds including AWS, Azure, OCI, and GCP. This role combines strategic security architecture with hands-on operational execution, owning cloud security posture management (CSPM), threat detection and response, application security testing (SAST/DAST), and RBAC governance. The successful candidate will collaborate with DevOps, Platform Engineering, and Development teams to embed security throughout the software delivery lifecycle and ensure all environments meet healthcare-grade compliance requirements.
Responsibilities
- Design, implement, and continuously improve cloud security architecture and controls across Azure-based environments.
- Lead threat modeling, vulnerability assessments, and security architecture reviews for cloud-native and hybrid infrastructure.
- Own and operate cloud security posture management (CSPM) using Prisma Cloud, including policy configuration, posture monitoring, finding triage, and remediation.
- Deploy, tune, and manage Microsoft Defender for Cloud and related Defender suite products across Azure subscriptions, investigating alerts and driving incident response.
- Integrate SAST and DAST tooling into CI/CD pipelines, triaging findings, defining severity thresholds, and partnering with developers to close vulnerabilities.
- Own the RBAC governance process, including designing role models, conducting access reviews, enforcing least-privilege principles, and documenting role assignments.
- Collaborate with DevOps and Platform Engineering teams to embed security controls into DevOps pipelines and IaC workflows.
- Act as an SME for security compliance frameworks relevant to healthcare data (SOC 2, HIPAA, ISO 27001, PHIPA/PHIPPA), mapping controls and supporting audits.
- Provide Level 3 escalation for security incidents and participate in on-call rotation for incident response and forensic triage.
- Lead and educate internal teams and clients on cloud security best practices, secure-by-design patterns, and zero-trust principles.
- Document security runbooks, post-incident reviews, threat models, and lessons learned, maintaining a living security knowledge base.
- Ensure all working hours are accurately reported in the Time tracking system, with the majority billed to client engagements.
- Comply with all privacy, security, and confidentiality policies, holding PHI and confidential information in strict confidence.
Requirements
- 7+ years of hands-on experience in cloud security, with a focus on Microsoft Azure (Azure Security Center, Azure Policy, Azure AD / Entra ID, Key Vault, NSGs, Private Endpoints, Defender for Cloud).
- Proven, production-level experience with Prisma Cloud (CSPM/CWPP), including policy management, alert triage, and remediation workflows.
- Hands-on experience with Microsoft Defender for Cloud and the broader Microsoft Defender suite.
- Practical experience implementing and operating SAST and DAST tools within CI/CD pipelines.
- Deep familiarity with DevOps pipeline security, secrets management, container image scanning, and supply-chain security.
- Strong RBAC design and governance experience, including building and enforcing role models, access review processes, and least-privilege controls.
- Solid IaC experience with Terraform and/or Ansible, including writing and reviewing security-hardened infrastructure code.
- Experience with Kubernetes / OpenShift and container security.
- Solid understanding of networking fundamentals as they apply to cloud security.
- Demonstrated knowledge of compliance frameworks applicable to healthcare (SOC 2, HIPAA, ISO 27001, PHIPA) and experience supporting audits.
- Professional cloud or security certifications preferred (e.g., AZ-500, MS-500, SC-200, CCSP, CISSP, or equivalent).
- Excellent written and verbal communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
Skills
- Cloud Security
- Microsoft Azure
- Azure Security Center
- Azure Policy
- Azure AD / Entra ID
- Key Vault
- NSGs
- Private Endpoints
- Defender for Cloud
- Prisma Cloud
- CSPM
- CWPP
- Microsoft Defender suite
- SAST
- DAST
- CI/CD
- DevOps pipeline security
- Secrets management
- Container image scanning
- Supply-chain security
- RBAC
- Terraform
- Ansible
- Kubernetes
- OpenShift
- Container security
- Networking fundamentals
- SOC 2
- HIPAA
- ISO 27001
- PHIPA
- Communication skills
Location
- Remote
Work Type
- Remote Work Environment
Experience Level
- Senior
Salary/Compensations
- $130,000 - $140,000 a year
Benefits
- Remote Work Environment
- Flexible Time Away From Work Policy including PTO, Personal and Sick Days
- Competitive Salary and Health/Medical Benefits
- RRSP/TFSA/401K Employee Contribution
- Life and Disability
- Employee Assistance Program
- FHIR Study Program and Skillsoft Learning
- Super HAPI Fun Club
About the Company
- Smile Digital Health supports the mandate for #BetterGlobalHealth through its innovative health data platform and data management solutions, used in over 20 countries.
- The company was ranked #19 on Deloitte's Technology Fast 50 Ranking for 2024.
- Smile Digital Health's FHIR-based data liberation platform enables healthcare stakeholders to collect and exchange data, helping organizations better manage healthcare data and ensure effective delivery across care teams and health systems.
- Artificial intelligence (AI) may be used in portions of the recruitment and selection process, such as resume screening or application assessment, but all hiring decisions are made by human decision-makers.
- This position is a new role created to support Smile’s continued growth and commitment to operational excellence.
- Smile's core values include respect, inclusion, embracing differences, and celebrating shared values, emphasizing that people are the foundation of their success.
- The company is dedicated to fostering a workplace that values diversity, equity, and inclusion, creating a sense of belonging and empowering employees to bring their authentic selves to work.
Equal Opportunity
- We welcome and encourage candidates of all backgrounds to apply.
- Candidates are encouraged to inform us if they wish to discuss or require accommodations during interviews or while working at Smile.