HYBRID - Senior Cloud Security Consultants to provide expert-level security guidance, accelerate decisions on cloud security controls, and support security

Our client is seeking two Senior Cloud Security Consultants to provide expert-level security guidance, accelerate decisions on cloud security controls, and support security engineering deliverables across a mix of on-prem and cloud environments.

Their Security team is operating at a capacity deficit due to a significant increase in project volume, cloud modernization initiatives, and maturing consulting and engineering needs. This is a hands-on, senior-level role for someone who can provide consulting, set cloud security standards, support engineering execution, and influence decision-making across projects and architecture teams.

Duration: 6 months (with potential extension)

Work Model: Hybrid 1x a week in North Vancouver

Reports To: Manager, Security Architecture & Engineering

Responsibilities

• Deliver timely security consulting to all assigned projects, ensuring alignment with organizational risk tolerance and security strategy.
• Participate in project reviews, architecture sessions, and threat modeling exercises.
• Develop and maintain cloud security standards, guidelines, and decision frameworks.
• Lead and drive decisions on cloud security controls in collaboration with Solution Architects and IT teams.
• Support the implementation of security engineering solutions for hybrid (on-prem + cloud) environments.
• Provide technical guidance on secure configurations, tooling, and integrations.
• Monitor and report on security risks, control gaps, and compliance status across assigned projects.
• Recommend and track mitigation activities.
• Update and maintain security documentation, policies, and consulting processes.
• Identify and recommend improvements to elevate the maturity of the Security Consulting practice.
• Build strong relationships with Architecture, Cloud, DevOps, and IT teams.
• Clearly articulate security decisions, risks, and trade-offs to technical and business stakeholders.

Must Haves

· 5+ years of experience in information security.

· 2+ years in a senior security consulting, architecture, or engineering role.

· Proven experience with cloud security for AWS, Azure, or GCP (security standards, frameworks, control selection, control implementation).

· Network Security

· Strong background in security engineering and/or security architecture.

· Experience working with hybrid environments (on-prem + cloud).

· Deep knowledge of security frameworks: NIST, ISO 27001, CIS Controls.

· Hands-on experience with modern security tools (e.g., CSPM, IAM, SIEM, CWPP, firewalls, key management).

· Understanding of Security Operations workflows and DevSecOps / secure SDLC principles (asset but not required).

· Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent experience.

· One or more of: CISSP, CCSP, AWS/Azure Security Specialty (preferred).

Nice to Haves

· Experience writing security standards and guidelines at an enterprise level.

· Experience supporting organizational cloud migrations.

· Exposure to threat modeling methodologies.