astra-north

Cloud Security Engineer – Azure, AWS, OCI & SIEM

astra-north

Toronto, Ontario, CanadaContractPosted Jul 8, 2026

Job description

Essential Skills:

  • More than 6 years of security engineering experience with 3+ years in cloud:
  • Azure
  • AWS
  • OCI Hands-on experience with:
  • Microsoft Defender for Cloud
  • Sentinel
  • Defender for Endpoint
  • Strong knowledge of cloud-native security services across at least two major cloud providers. Experience with:
  • SIEM platforms
  • Threat detection
  • Incident response Understanding of network security:
  • Firewalls
  • WAF
  • IDS/IPS
  • Zero Trust principles Familiarity with compliance frameworks:
  • CIS
  • NIST
  • ISO 27001
  • SOC 2 Certifications:
  • Microsoft Certified: Security Operations Analyst (SC-200) preferred
  • Azure Security Engineer (AZ-500) preferred
  • AWS Security Specialty or OCI Security Professional is a strong asset Design and implement cloud security architecture across:
  • Azure
  • AWS
  • OCI environments Configure and manage:
  • Microsoft Defender for Cloud
  • Defender for Endpoint (Plan 2)
  • Sentinel SIEM Implement and tune:
  • Azure Firewall
  • WAF policies (OWASP rules)
  • DDoS Protection Manage AWS security services:
  • Guard. Duty
  • Security Hub
  • Inspector
  • AWS Config
  • Macie Configure OCI security services:
  • Cloud Guard
  • Security Zones
  • VSS (Vulnerability Scanning Service) Enforce:
  • Security baselines
  • CIS Benchmarks
  • Regulatory compliance controls
  • Implement EDR solutions and manage endpoint security posture across hybrid environments. Design and review network security:
  • NSGs
  • Security Groups
  • Security Lists
  • NVA traffic inspection
  • Integrate SIEM/SASE solutions and support SOC operations with detection and response runbooks. Conduct:
  • Security risk assessments
  • Threat modelling
  • Architecture reviews Prepare:
  • Governance documentation
  • Security artefacts
  • Executive-level security reporting Nice to Have:
  • Experience with SASE vendors: Zscaler, Palo Alto Prisma, Netskope.