Senior Cloud Security Engineer

🕒 July 18

🇨🇦 Canada – Remote

💵 $130k - $140k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 13%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Smile Digital Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2016

💼 Consulting

📦 Logistics

📣 Marketing

💰 $30M Series B on 2023-01

Consulting • Logistics • Marketing

Smile Digital Health is a company specializing in healthcare data interoperability and health IT solutions. Their Smile Health Data Platform enables efficient data ingestion and transformation into FHIR resources, enhancing clinical decision-making and business intelligence. Focused on compliance and security, Smile Digital Health offers services such as prior authorization automation, standardizing data exchange, and supporting healthcare providers, payers, and health information exchanges with customizable and scalable solutions.

📋 Description

• Design, implement, and continuously improve cloud security architecture and controls across Azure environments • Lead threat modelling, vulnerability assessments, and security architecture reviews for cloud-native and hybrid infrastructure • Own and operate CSPM using Prisma Cloud, including policy configuration, posture monitoring, finding triage, and remediation • Deploy, tune, and manage Microsoft Defender for Cloud and related Defender products across Azure subscriptions • Investigate alerts and drive incident response • Integrate SAST and DAST tooling into CI/CD pipelines and partner with developers to close vulnerabilities before production release • Own RBAC governance, including role models, access reviews, least-privilege enforcement, and role-assignment documentation • Embed secrets management, image scanning, and policy-as-code into DevOps pipelines and Terraform/Ansible IaC workflows • Serve as SME for healthcare security compliance frameworks and support audits • Provide Level 3 security-incident escalation and participate in the on-call rotation for incident response and forensic triage • Educate internal teams and clients on cloud-security best practices, secure-by-design patterns, and zero-trust principles • Document runbooks, post-incident reviews, threat models, lessons learned, and security knowledge-base content • Report working hours accurately, with most hours billed to client engagements • Protect PHI and confidential information during and after employment

🎯 Requirements

• 7+ years of hands-on experience in cloud security, with the majority focused on Microsoft Azure • Production-level experience with Prisma Cloud (CSPM/CWPP), including policy management, alert triage, and remediation workflows • Hands-on experience with Microsoft Defender for Cloud and the broader Microsoft Defender suite • Experience implementing and operating SAST and DAST tools within CI/CD pipelines • Experience securing GitHub Actions/Azure DevOps pipelines, secrets management, container image scanning, and supply-chain security • Strong RBAC design and governance experience across Azure and multi-tier application stacks • Experience with Terraform and/or Ansible • Experience with Kubernetes/OpenShift and container security • Understanding of cloud-security networking fundamentals, including VNets, NSGs, Azure Firewall, Private Link, and Zero Trust network segmentation • Knowledge of healthcare compliance frameworks including SOC 2, HIPAA, ISO 27001, and PHIPA • Professional cloud or security certifications preferred, such as AZ-500, MS-500, SC-200, CCSP, or CISSP • Excellent written and verbal communication skills • Ability to convey complex security concepts to technical and non-technical stakeholders • Ability to accurately report working hours in the Time tracking system • Compliance with privacy, security, and confidentiality policies

🏖️ Benefits

• Remote Work Environment • Flexible Time Away From Work Policy including PTO, Personal and Sick Days • Competitive Salary and Health/Medical Benefits • RRSP/TFSA/401K Employee Contribution • Life and Disability • Employee Assistance Program • FHIR Study Program and Skillsoft Learning • Super HAPI Fun Club • Workplace accommodations during interviews or while working at Smile