Security Cloud Consultant

We are seeking an experienced Cloud Security Consultant to design, assess, and strengthen secure cloud architectures across AWS, Azure, and/or GCP. This role is central to advancing cloud security posture, embedding security into engineering and DevOps workflows, and ensuring compliance within a highly regulated environment, particularly financial services. The ideal candidate combines deep technical expertise with strong stakeholder management skills to influence both technical and business teams. Location: Montreal, QC - Hybrid (3 days on-site per week) Responsibilities Design and implement secure cloud architectures across AWS, Azure, and/or GCP following security best practices. Conduct cloud security architecture reviews and risk assessments for new and existing cloud environments. Perform threat modeling to identify security risks across cloud infrastructure, applications, networks, and identities. Define and enforce cloud security controls for IAM, network security, data protection, encryption, key management, and Kubernetes/container platforms. Support and secure cloud migration initiatives from on-premises environments to public cloud platforms. Collaborate with engineering, DevOps, and application teams to implement secure-by-design solutions. Enable DevSecOps practices by integrating security into CI/CD pipelines, Infrastructure as Code (IaC), and policy-as-code frameworks. Develop and maintain cloud security standards, reference architectures, and technical guidance. Ensure cloud environments comply with enterprise security policies, regulatory requirements, and industry standards, particularly within financial services. Evaluate cloud solutions for compliance, identify security gaps, and recommend remediation strategies. Provide technical leadership and security guidance to project teams and key stakeholders. Stay current on emerging cloud security threats, technologies, and best practices to continuously improve cloud security posture. Requirements 5–7 years of experience in Cloud Security, Cloud Architecture, or Information Security. Proven experience designing, assessing, and securing cloud architectures on AWS, Azure, and/or GCP. Strong knowledge of Identity and Access Management (IAM), network security, workload and application security, Kubernetes/container security, encryption, data protection, and enterprise key management. Experience securing cloud migrations from on-premises environments to public cloud platforms. Experience working within highly regulated environments, preferably in the financial services industry. Proven ability to perform cloud security risk assessments, architecture reviews, and threat modeling. Strong understanding of security risks across compute, network, storage, and identity layers. Knowledge of enterprise security policies, regulatory requirements, and industry security standards. Experience implementing DevSecOps practices, including Infrastructure as Code (IaC), CI/CD security controls, and policy-as-code. Experience developing and promoting secure-by-design cloud architectures and security best practices. Ability to create security standards, reference architectures, and technical guidance for cloud environments. Strong stakeholder management skills with experience leading cross-functional initiatives and influencing technical and business teams. English fluent required Why choose us An international community bringing together more than 110 different nationalities An environment where trust is central: 70% of our leaders started their careers at the entry level A strong training system with our internal Academy and more than 250 modules available A dynamic work environment that frequently comes together for internal events (afterworks, team buildings, etc.) Amaris Consulting promotes equal opportunities. We are committed to bringing together people from diverse backgrounds and creating an inclusive work environment. In this regard, we welcome applications from all qualified individuals, regardless of sex, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

Design and implement secure cloud architectures and enforce security controls across AWS, Azure, and GCP. Integrate security into DevOps workflows through DevSecOps practices and ensure compliance with financial services regulations.

Requires 5–7 years of experience in cloud security or architecture with expertise in IAM, network security, and container platforms. Candidates must have experience in highly regulated environments and the ability to perform threat modeling and risk assessments.

• Internal Academy with over 250 modules • Internal training system • Team building events • Afterworks

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Cloud Security
• Cloud Architecture
• AWS
• Azure
• GCP
• Identity and Access Management
• Network Security
• Kubernetes
• Container Security
• DevSecOps
• Infrastructure as Code
• Threat Modeling
• Risk Assessment
• Data Protection
• Encryption
• Stakeholder Management

• Technology
• Security & Safety
• Consulting
• Software
• Data & Analytics

Expérience minimale

5+ ans

Postuler avant le

21 août 2026

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Présence au bureau

3 jours par semaine

Niveau d’expérience

Mid-Senior level

Mode de candidature

La candidature directe est offerte