Cloud Security Engineer

**Location:**Toronto, ON

**Hybrid:**3 days in office

Salary:$100,000.00 + per annum

**Years of experience:**5+ years related experience in Cloud Security Engineering roles

About the Role

We are seeking an experienced Cloud Security Engineer with 5+ years in cloud security to strengthen our enterprise environments. The role centers on managing, maintaining and supporting Microsoft cloud solutions M365 and Azure. ie Intune, Co-Pilot, Azure Security services, and Microsoft Defender for Cloud and Endpoint along with other capabilities. You will be responsible for securing cloud infrastructure, enhancing threat detection and response and driving Zero Trust and compliance across the cloud environment.

Key Responsibilities

• Design, deploy, and refineZero Trust security architecturesfor Azure and Microsoft 365 environments.
• Implement and manage identities and Access usingMicrosoft Entra(MFA, SSO, PIM, etc.)
• Implement and manageMicrosoft Intunefor device management, including endpoint security, compliance polices, and secure device management.
• Implement and manageMicrosoft Co-Pilotto enhance AI and automation capabilities for operational and integration work.
• Deploy, configure, and maintainAzure Security services(Azure Security Center, Azure Policy, Key Vault, Privileged Identity Management, Conditional Access, MFA, etc...).
• Manage and optimizeDefender for Cloud (CSPM).
• Develop, test and support security baselines, RBAC policies and compliance policies throughsecurity posture assessmentsacross Azure workloads and endpoints aligned with compliance frameworks (CIS, NIST, ISO, etc..)
• Supportthreat modeling, risk assessments, and incident response activitiesto reduce risk exposure.
• Supportaudit, governance, and compliance reportingusing Microsoft security and compliance solutions.
• Familiarity and support of WAFs and Firewalls.
• Provide technical guidance, security automation, and mentoring to colleagues.

-5+ years in Cloud Security Engineering roles. -Hands on experience with:

• Microsoft Intune (endpoint/device security, compliance, app protection).
• Co-Pilot for automation
• Defender suite (Cloud, Endpoint, Identity)
• Azure AD, Conditional Access, MFA, RBAC, Key Vault
• Strong Background in Azure Policy, Blueprints and Security Baselines
• Support VPNs, Firewalls, WAF's, within the Azure enviornment
• Support Sentinel SIEM/SOAR (analytics, rules, automated playbooks)
• PIM (Privileged Identity Management) -Experience in vulnerability management, systems hardening, orchestration/automation (PowerShell, Azure CLI, Terraform, Python) -Support Incident Response in M365 and Azure framework -Good Knowledge of compliance frameworks (CIS, NSIT, ISO27001, GDPR, etc.) -Excellent problem solving, written and communication skills -Bonus: Familiarity with Qualys, LanSweeper, Global Secure Access, Purview

Preferred Qualifications

-Certifications:

• AZ-500: Microsoft Azure Security Technologies
• SC-200: Microsoft Security Operations Analyst
• SC-100: Microsoft Cybersecurity Architect (Preferred)
• Microsoft Certified: Endpoint Administrator / Intune Specialist
• Experience withcloud-native securityacross multi-cloud (Azure, AES, GCP).
• Familiarity withZero Trust Architectureandmodern endpoint management

About TPH

TPH operates 65 production centres across Canada to serve our customers where and when they need it. Locally produced, in the exact quantity that our customers require, and delivered when and where they need it. TPH has been namedNorth America's most forest-friendly printerand one ofCanada's Greenest Employers.

Commitment to Diversity, Inclusion, AccessibilityAnti-Racism:

TPH is committed to a diverse and inclusive workplace where everyone is respected and valued for their contributions and has opportunity to grow and develop. TPH will provide accommodation throughout the recruitment process upon request. If you require accommodation, please notify us and we will work with you to meet your needs.